Cwe-502 - Deserialization Of Untrusted Data - Cwe

Related Threat Clusters

• Critical RCE Vulnerability in PTC Windchill and FlexPLM Under Active Exploitation

  Hackers are exploiting a critical vulnerability in PTC Windchill and FlexPLM, tracked as CVE-2026-12569, which allows remote code execution due to an unsafe deserialization flaw. This vulnerability affects product…

  2 articles · Updated June 29, 2026
• Critical RCE Vulnerability in Oracle PeopleSoft Exploited by SHADOW-AETHER-015

  A pre-authentication remote code execution (RCE) vulnerability, CVE-2026-35273, was discovered in Oracle PeopleSoft PeopleTools, affecting versions 8.61 and 8.62. The vulnerability allows unauthenticated attackers to…

  5 articles · Updated June 18, 2026
• Russian TA488 and TA458 Exploit Webmail Vulnerabilities in Espionage Campaigns

  Russian threat actors TA488 and TA458 are exploiting vulnerabilities in webmail servers, specifically targeting Ukrainian entities and government sectors. TA488 utilizes a half-click exploit via CVE-2025-66376 in Zimbra…

  2 articles · Updated July 23, 2026
• Chinese Threat Group Exploits Roundcube Vulnerabilities in University Networks

  A suspected China-aligned threat group, tracked as UNK_MassTraction, has been exploiting vulnerabilities in Roundcube mail servers at U.S. and Canadian universities since May 2026. The campaign targets physics and…

  14 articles · Updated July 7, 2026
• Sandworm Targets Critical Infrastructure with Aggressive OT Attacks

  The Russian state-sponsored group Sandworm has intensified its cyber operations against industrial and critical infrastructure, utilizing pre-compromised operational technology (OT) environments instead of zero-day…

  5 articles · Updated May 14, 2026
• Critical RCE Vulnerability in Jenkins Exploited in the Wild

  A critical remote code execution (RCE) vulnerability, CVE-2026-53435, has been identified in Jenkins, affecting versions 2.567 and earlier, including LTS 2.555.2 and earlier. This flaw allows attackers to exploit…

  3 articles · Updated June 17, 2026
• July 2026 Security Update: Record CVEs and Critical Vulnerabilities

  In July 2026, Adobe and Microsoft released significant security updates addressing numerous vulnerabilities. Adobe issued 12 bulletins for 88 unique CVEs, with a focus on ColdFusion and Commerce patches, including a…

  3 articles · Updated July 14, 2026
• AWS Warns of Data Exfiltration Risks from Outbound Traffic Blind Spots

  AWS has highlighted the risks associated with unmonitored outbound traffic in cloud environments, particularly in light of the CVE-2025-55182 vulnerability affecting React Server Components. This vulnerability allows…

  4 articles · Updated June 23, 2026
• Critical RCE Vulnerability in fastjson Disclosed (CVE-2026-16723)

  A remote code execution (RCE) vulnerability, CVE-2026-16723, has been identified in fastjson versions 1.2.68 to 1.2.83. This vulnerability can be exploited without requiring AutoType enablement or classpath gadgets,…

  3 articles · Updated July 23, 2026
• Critical Vulnerabilities in pgAdmin 4 Expose Databases to Remote Code Execution

  pgAdmin 4 version 9.16 was released to patch seven vulnerabilities, including critical issues tracked as CVE-2026-12044 to CVE-2026-12050. These vulnerabilities could allow attackers to execute arbitrary commands, gain…

  9 articles · Updated June 22, 2026

Recent Intelligence Reports

• CVE-2025-49113 — nvd.nist.gov · July 24, 2026
• Rust In Peqace — Scadastrangelove.Blogspot · July 23, 2026
• CVE-2026-16723 CVE Vulnerability Disclosures / 7h A remote code execution (RCE) vulnerability exists in fastjson 1.2.68 through 1.2.83. This vulnerability is exploitable under fastjson's stock default configuration — no AutoType enablement required, no classpath gadget required. — cve.report · July 23, 2026
• ta458 roundpress exploits — Proofpoint · July 23, 2026
• The July 2026 Security Update Review — www.zerodayinitiative.com · July 22, 2026
• Three Zero Days 570 Flaws Microsoft S July 2026 Patch Tuesday Sets A New Record — www.secpod.com · July 22, 2026
• CVE-2024-58362 Vulnerability — CVSS 8.8, HIGH Severity — Ismalicious · July 18, 2026
• AI supply chain attacks — hivesecurity.gitlab.io · July 17, 2026

Related Entities