DevThe Hacker Newsabout 3 hours ago
Fastjson 1.x RCE Flaw Under Active Attack
1 min read
Attackers are exploiting CVE-2026-16723, a critical 9.0 CVSS vulnerability in Alibaba's Fastjson 1.x Java library. The flaw allows unauthenticated remote code execution in Spring Boot fat-JAR applications. No patched Fastjson 1.x version exists as of July 25. Alibaba recommends migrating to Fastjson2.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
