cve.akaoma.com Critical RCE Vulnerability in fastjson Disclosed (CVE-2026-16723)
Article Content
- •CVE-2026-16723 is a critical RCE vulnerability in fastjson versions 1.2.68 to 1.2.83.
- •Exploitation does not require AutoType enablement or classpath gadgets.
- •Immediate action is needed: update fastjson and restrict network access.
A remote code execution (RCE) vulnerability, CVE-2026-16723, has been identified in fastjson versions 1.2.68 to 1.2.83. This vulnerability can be exploited without requiring AutoType enablement or classpath gadgets, making it particularly dangerous. An unauthenticated attacker can execute arbitrary code on systems using the affected library over the network. The CVSS score for this vulnerability is 9.0, indicating a severe risk. Currently, there is no evidence of public proof-of-concept or confirmed exploitation. Cybersecurity professionals are urged to update fastjson to versions beyond 1.2.83 and restrict network access to vulnerable applications. The vulnerability was published on July 23, 2026, and is considered an immediate threat requiring urgent mitigation.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (25)
Following this threat?
Track CVE-2026-16723 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Brotli Decoder Vulnerability Patched Across Multiple Linux Distributions A vulnerability, CVE-2026-111497, affecting the Brotli decoder has been patched in various Linux distributions, including Fedora 44 and Oracle Linux 10. The flaw allows for an out-of-bounds write, which could potentially enable attackers to execute arbitrary code. The vulnerability was published on October 22, 2026…