Insecure Deserialization

Vulnerability

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

December 15, 2025

Last Seen

September 9, 2026

API

Insecure deserialization is a vulnerability where untrusted serialized data is deserialized by an application, allowing attackers to craft payloads that can execute arbitrary code, cause crashes, or trigger denial-of-service conditions.

Overview

Recent Events

Related Clusters (6)

1 / 2

Related Entities

Sql Injection Denial of Service Server-Side Request Forgery Privilege Escalation Code Injection Cross-site Scripting DDoS Information Disclosure Remote Code Execution Server-Side Request Forgery (ssrf)CVE-2026-76960 CVE-2026-76961

Insecure Deserialization

Overview

Recent Events

Profile

Tools Used

Related CVEs

MITRE Techniques

Affected Platforms

Related Clusters (6)

Critical OVERPASS Vulnerability in SAP Kernel Requires Immediate Action

SAP Patch Day Addresses Critical Vulnerabilities

Remote Code Execution Vulnerabilities in Apache ActiveMQ and OFBiz Detected

Claude Mythos Unleashes Vulnerability Discovery Bottleneck

NVIDIA Merlin Vulnerabilities Enable Code Execution and DoS Attacks

AI Agents Excel in Web Security CTF Challenges

Related Articles (7)

OWASP Top 10

September 2026

September 2026 security updates

Rule Docs 1:66532

SAP Releases Patches for Security Flaws Allowing Remote Code Execution

AI Agents vs Humans: Who Wins at Web Hacking in 2026?

NVIDIA Merlin Vulnerabilities Let Attackers Execute Malicious Code and Trigger DoS Condition

Related Entities