CVE-2021-23758: Ajax.NET RCE via Deserialization of Untrusted Data
CVE-2021-23758 in Ajax.NET Professional allows remote code execution via untrusted data deserialization, with CISA confirming active exploitation.
- Remote Code Execution (RCE) is possible via CVE-2021-23758, with confirmed active exploitation in the wild.
- Ajax.NET Professional (AjaxPro) is vulnerable to deserialization of untrusted data.
- Discontinue use, transition to a supported version, or apply vendor mitigations if available.