Cybersecurity articles tagged #Deserialization on RuntimeRebel.https://runtimerebel.comhttps://runtimerebel.com/blog/cve-2021-23758-ajax-net-rce-via-deserialization-of-untrusted-datahttps://runtimerebel.com/blog/cve-2021-23758-ajax-net-rce-via-deserialization-of-untrusted-dataCVE-2021-23758 in Ajax.NET Professional allows remote code execution via untrusted data deserialization, with CISA confirming active exploitation.Tue, 01 Sep 2026 02:58:41 GMTCVE-2021-23758Ajax NET ProfessionalDeserializationRemote Code ExecutionCISA KEVhttps://runtimerebel.com/blog/microsoft-entra-id-rce-flaw-cve-2026-69836-fully-mitigatedhttps://runtimerebel.com/blog/microsoft-entra-id-rce-flaw-cve-2026-69836-fully-mitigatedMicrosoft has fully mitigated a critical remote code execution flaw, CVE-2026-69836, in Entra ID (formerly Azure AD). No customer action is required.Sun, 23 Aug 2026 08:18:38 GMTMicrosoft Entra IDAzure ADRemote Code ExecutionDeserializationCloud Securityhttps://runtimerebel.com/blog/cve-2026-63077-jetbrains-teamcity-rce-via-deserializationhttps://runtimerebel.com/blog/cve-2026-63077-jetbrains-teamcity-rce-via-deserializationCISA adds CVE-2026-63077 to KEV, indicating active exploitation of a JetBrains TeamCity deserialization RCE vulnerability.Tue, 11 Aug 2026 16:54:33 GMTCVE-2026-63077JetBrains TeamCityDeserializationRemote Code ExecutionCISA KEVhttps://runtimerebel.com/blog/cve-2026-50522-sharepoint-rce-via-deserialization-patch-nowhttps://runtimerebel.com/blog/cve-2026-50522-sharepoint-rce-via-deserialization-patch-nowCISA confirmed active exploitation of CVE-2026-50522 in Microsoft SharePoint. Attackers leverage a deserialization vulnerability to execute code remotely. Patch…Sun, 02 Aug 2026 16:49:14 GMTCVE-2026-50522Microsoft SharePointDeserializationRemote Code ExecutionCISA KEVhttps://runtimerebel.com/blog/fastjson-zero-day-rce-exploitation-targets-us-firmshttps://runtimerebel.com/blog/fastjson-zero-day-rce-exploitation-targets-us-firmsHackers are actively exploiting a Zero-Day RCE vulnerability in the FastJson Java library, enabling remote code execution against US firms.Tue, 28 Jul 2026 02:37:59 GMTFastjsonRCEZero-DayJavaUs FirmsDeserializationhttps://runtimerebel.com/blog/cve-2024-45133-apache-druid-rce-via-yaml-deserializationhttps://runtimerebel.com/blog/cve-2024-45133-apache-druid-rce-via-yaml-deserializationCritical unauthenticated RCE in Apache Druid CVE-2024-45133 allows attackers to execute code via unsafe SnakeYAML deserialization in ingestion tasks.Thu, 02 Jul 2026 07:41:21 GMTApache DruidCVE-2024-45133RCESnakeyamlDeserializationPatch Managementhttps://runtimerebel.com/blog/cve-2026-45659-sharepoint-rce-exploitation-mitigation-guidehttps://runtimerebel.com/blog/cve-2026-45659-sharepoint-rce-exploitation-mitigation-guideCISA adds CVE-2026-45659, a high-severity SharePoint Server deserialization flaw, to KEV catalog after confirmed active exploitation by threat actors.Thu, 02 Jul 2026 07:34:50 GMTCVE-2026-45659Microsoft SharePointDeserializationCISA KEVRemote Code Executionhttps://runtimerebel.com/blog/cve-2026-45247-magento-mirasvit-cache-warmer-rce-exploit-analysishttps://runtimerebel.com/blog/cve-2026-45247-magento-mirasvit-cache-warmer-rce-exploit-analysisCISA adds CVE-2026-45247, a critical Mirasvit Cache Warmer RCE flaw impacting Magento sites, to the KEV catalog following reports of active exploitation.Thu, 04 Jun 2026 09:25:50 GMTCVE-2026-45247MagentoMirasvitRCECISA KEVDeserializationhttps://runtimerebel.com/blog/cve-2026-45247-mirasvit-full-page-cache-warmer-exploited-patch-nowhttps://runtimerebel.com/blog/cve-2026-45247-mirasvit-full-page-cache-warmer-exploited-patch-nowCISA adds CVE-2026-45247, a deserialization vulnerability in Mirasvit Full Page Cache Warmer for Magento, to the KEV catalog after reports of active exploitation.Wed, 03 Jun 2026 17:47:53 GMTCVE-2026-45247MirasvitMagentoCISA KEVRCEDeserializationhttps://runtimerebel.com/blog/cve-2026-45659-sharepoint-rce-via-deserialization-patch-nowhttps://runtimerebel.com/blog/cve-2026-45659-sharepoint-rce-via-deserialization-patch-nowMicrosoft addresses CVE-2026-45659, a high-severity RCE flaw in SharePoint Server caused by untrusted data deserialization. Learn how to mitigate this risk.Tue, 26 May 2026 13:10:28 GMTCVE-2026-45659SharePointRCEMicrosoftDeserializationhttps://runtimerebel.com/blog/hugging-face-lerobot-rce-via-cve-2026-25874-mitigation-guidehttps://runtimerebel.com/blog/hugging-face-lerobot-rce-via-cve-2026-25874-mitigation-guideTechnical analysis of CVE-2026-25874, a critical unpatched RCE vulnerability in Hugging Face LeRobot robotics platform with a CVSS score of 9.3.Tue, 28 Apr 2026 12:43:39 GMTCVE-2026-25874Hugging FaceLeRobotRCERoboticsDeserializationhttps://runtimerebel.com/blog/cisa-kev-update-exchange-server-adobe-ms-windows-exploitshttps://runtimerebel.com/blog/cisa-kev-update-exchange-server-adobe-ms-windows-exploitsCISA adds seven vulnerabilities, including critical Microsoft Exchange Server deserialization, to its Known Exploited Vulnerabilities Catalog, urging immediate…Tue, 14 Apr 2026 00:47:03 GMTCVE-2012-1854CVE-2020-9715CVE-2023-21529CVE-2023-36424CVE-2025-60710CVE-2026-21643CVE-2026-34621Microsoft Exchange ServerAdobe AcrobatMicrosoft WindowsFortinetCISAKEV CatalogDeserializationUse After FreeSQL Injectionhttps://runtimerebel.com/blog/cve-2026-4681-critical-rce-in-ptc-windchill-flexplmhttps://runtimerebel.com/blog/cve-2026-4681-critical-rce-in-ptc-windchill-flexplmCritical RCE vulnerability CVE-2026-4681 affects PTC Windchill and FlexPLM via deserialization. Patch now to prevent code injection in critical manufacturing.Thu, 26 Mar 2026 16:40:04 GMTCVE-2026-4681PTC WindchillFlexPLMRCECode InjectionDeserializationCritical Manufacturinghttps://runtimerebel.com/blog/cve-2026-20131-cisco-fmc-scc-deserialization-vulnerability-under-active-attackhttps://runtimerebel.com/blog/cve-2026-20131-cisco-fmc-scc-deserialization-vulnerability-under-active-attackCISA adds CVE-2026-20131, a critical deserialization vulnerability in Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC), to KEV Catalog due…Fri, 20 Mar 2026 16:21:47 GMTCVE-2026-20131Cisco Secure Firewall Management CenterCisco Security Cloud ControlDeserializationKEV Cataloghttps://runtimerebel.com/blog/cisa-catalogs-critical-roundcube-deserialization-vulnerability-under-active-exploitationhttps://runtimerebel.com/blog/cisa-catalogs-critical-roundcube-deserialization-vulnerability-under-active-exploitationCISA has added CVE-2025-49113 to the Known Exploited Vulnerabilities catalog, addressing a critical RCE flaw in Roundcube webmail software resulting from untrusted data…Mon, 23 Feb 2026 04:06:31 GMTCVE-2025-49113RoundcubeRCECISA KEVDeserialization