CVE-2026-16723

• Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available

  Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available Security firms ThreatBook and Imperva say attackers are targeting a critical flaw in Fastjson, Alibaba's JSON library for Java. In affected Spring Boot applications, a malicious JSON request can execute

• Attackers Exploit Arista VeloCloud Orchestrator Command Injection Flaw

  Attackers Exploit Arista VeloCloud Orchestrator Command Injection Flaw A maximum-severity security flaw impacting on-premises versions of Arista VeloCloud Orchestrator (VCO) has come under active exploitation in the wild. The vulnerability, tracked as CVE-2026-16812 (CVSS score:

• Unpatched Fastjson Vulnerability Exploited in Attacks

  Unpatched Fastjson Vulnerability Exploited in Attacks The critical remote code execution bug can be exploited without authentication, under the library’s stock default configurations. The post Unpatched Fastjson Vulnerability Exploited in Attacks appeared first on SecurityWeek .

All reports →