SecurityCISA Warns of Active JetBrains TeamCity Flaw
A deserialization vulnerability in JetBrains TeamCity is under active exploitation, forcing federal agencies to patch systems by August 8, 2026.
> Search
9 results for “deserialization”
SecuritySecurityFlowise Patches Critical CSVAgent RCE Flaw
A critical remote code execution vulnerability in Flowise's CSVAgent allows attackers to bypass python code filters using pandas read_pickle deserialization.
SecurityCritical RCE Flaw Found in Kotaemon 0.12.0
An unauthenticated remote code execution vulnerability in Kotaemon allows attackers to run arbitrary system commands by exploiting insecure deserialization.
SecurityCritical RCE Flaw Found in ComfyUI v0.23.0
A critical deserialization vulnerability in ComfyUI allows unauthenticated attackers to execute arbitrary code on affected systems.
SecurityCritical RCE Flaw Found in IBM webMethods
A critical deserialization vulnerability in IBM webMethods Integration allows unauthenticated remote attackers to execute arbitrary code on affected systems.
SecurityOpenAM WebAuthn Flaw Enables RCE Risk
A deserialization vulnerability in OpenAM's WebAuthn module allows remote code execution through an object filter depth bypass.
SecurityCritical Seroval Deserialization Flaw Patched
A type confusion vulnerability in seroval.fromJSON() allows attackers to trigger unintended server-side code execution through malicious JSON payloads.
SecurityCISA Adds Microsoft SharePoint Deserialization Flaw to KEV Catalog
A critical deserialization vulnerability in Microsoft SharePoint is currently being exploited in the wild, requiring immediate action from federal agencies.
SecurityCISA Adds Actively Exploited Microsoft SharePoint Flaw to KEV Catalog
A deserialization vulnerability in Microsoft SharePoint is currently being exploited in the wild, prompting an urgent remediation deadline for federal agencies.