CVE-2026-16723

CVE

Threat entity extracted from intelligence sources

Frequency

4

occurrences

First Seen

July 23, 2026

Last Seen

July 28, 2026

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical RCE Vulnerability in fastjson Disclosed (CVE-2026-16723)74.0

A remote code execution (RCE) vulnerability, CVE-2026-16723, has been identified in fastjson versions 1.2.68 to 1.2.83. This vulnerability can be exploited without requiring AutoType enablement or classpath gadgets, making it particularly dangerous. An unauthenticated attacker can execute arbitrary...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Critical RCE Vulnerability in fastjson Disclosed (CVE-2026-16723)

Jul 23·9 sources

Related Articles (4)

Attackers Exploit Arista VeloCloud Orchestrator Command Injection Flaw

unsafe.sh·Jul 28

CVE-2026-16723 CVE Vulnerability Disclosures / 7h A remote code execution (RCE) vulnerability exists in fastjson 1.2.68 through 1.2.83. This vulnerability is exploitable under fastjson's stock default configuration — no AutoType enablement required, no classpath gadget required.

cve.report·Jul 23

CVE-2026-16723 AKAOMA CVE VULNERABILITIES / 7h A remote code execution (RCE) vulnerability exists in fastjson 1.2.68 through 1.2.83. This vulnerability is exploitable under fastjson's stock default configuration — no AutoType enablement required, no classpath gadget required.

cve.akaoma.com·Jul 23

CVE-2026-16723 - Exploits & Severity

Related Entities

Zero-day Exploit Alibaba Arista Networks Fortinet CVE-2025-68686 CVE-2026-16812 CWE-200 - Exposure of Sensitive Information CWE-20 - Improper Input Validation CWE-502 - Deserialization Of Untrusted Data Fastjson