{"metadata": {"vulnerability": "CVE-2026-16723", "count": 112, "kinds": {"milestone": 4, "sighting": 95, "kev": 5, "other": 8}, "linked_omitted": 0}, "data": [{"timestamp": "2026-07-23T02:40:02.606Z", "date_only": false, "value": "2026-07-23T02:40:02.606Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-16723", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-07-23T08:26:24.453Z", "date_only": false, "value": "2026-07-23T08:26:24.453Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-16723", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-23T08:26:24.453Z", "date_only": false, "value": "2026-07-23T08:26:24.453Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / alibaba", "record": "CVE-2026-16723", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-23T08:46:26.325Z", "date_only": false, "value": "2026-07-23T08:46:26.325217Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/suriq.io/post/3mrch7ck5e62q", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "da0b10a6-eac1-4425-9606-0e6046b99331", "content": "\ud83d\udd34 EXPLOITED\n\nA critical flaw in fastjson, a widely used Java data library, lets a stranger run code on the server in its default setup. (CVE-2026-16723)\n\nHits fastjson 1.2.68 to 1.2.83; turning AutoType off does not help.\n\nFix: enable SafeMode or move to fastjson2.", "url": "https://bsky.app/profile/suriq.io/post/3mrch7ck5e62q"}, {"timestamp": "2026-07-23T09:00:28.652Z", "date_only": false, "value": "2026-07-23T09:00:28.652976Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/116968471131630189", "record": "cve-2026-16723", "field": "creation_timestamp", "uuid": "7b33e5de-813f-42bd-b4fd-45ff7d456f76", "content": "CVE-2026-16723: CRITICAL RCE in Alibaba Fastjson 1.2.68. Exploitable under default config \u2014 no patch yet. Avoid 1.2.68 & monitor vendor updates for mitigation. CVSS 9.0. https://radar.offseq.com/threat/cve-2026-16723-cwe-20-improper-input-validation-in-alibaba-fastjson-939ed165aac7ce81 #OffSeq #infosec #CVE202616723 #remotecodeexecution", "url": "https://infosec.exchange/users/offseq/statuses/116968471131630189"}, {"timestamp": "2026-07-23T09:00:30.460Z", "date_only": false, "value": "2026-07-23T09:00:30.460814Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mrchyhlrvl25", "record": "cve-2026-16723", "field": "creation_timestamp", "uuid": "5aea316a-03f4-4ca7-818c-13d5d575e54e", "content": "CRITICAL RCE found in Alibaba Fastjson 1.2.68 (CVE-2026-16723). Remote exploit possible by default config. No patch available \u2014 avoid affected version, monitor for updates. https://radar.offseq.com/threat/cve-2026-16723-cwe-20-improper-input-validation-in-alibaba-fastjson-939ed165aac7ce81 #OffSeq...", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mrchyhlrvl25"}, {"timestamp": "2026-07-23T09:16:26Z", "date_only": false, "value": "2026-07-23T09:16:26Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-CRF3-V9RR-V7HJ", "record": "GHSA-CRF3-V9RR-V7HJ", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-07-23T09:16:26.700Z", "date_only": false, "value": "2026-07-23T09:16:26.700", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-16723", "record": "FKIE_CVE-2026-16723", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-07-23T09:32:01Z", "date_only": false, "value": "2026-07-23T09:32:01Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-CRF3-V9RR-V7HJ", "record": "GHSA-CRF3-V9RR-V7HJ", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-07-23T13:54:05.935Z", "date_only": false, "value": "2026-07-23T13:54:05.935678Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-16723", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-07-23T13:54:05.935Z", "date_only": false, "value": "2026-07-23T13:54:05.935678Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-16723", "record": "FKIE_CVE-2026-16723", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-07-23T13:54:13.031Z", "date_only": false, "value": "2026-07-23T13:54:13.031Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-16723", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-07-23T13:54:13.031Z", "date_only": false, "value": "2026-07-23T13:54:13.031Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-16723", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-23T13:56:04.346Z", "date_only": false, "value": "2026-07-23T13:56:04.346525Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrcyiy4vmz2j", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "0d76303b-913f-4ed1-b9ca-c41545fdfaf6", "content": "CVE-2026-16723 - fastjson\nFastjson versions 1.2.68 to 1.2.83 are vulnerable to a serious security risk. This means an attacker could potentially take control of your system by sending malicious data. You\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#fastjson #alibaba #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mrcyiy4vmz2j"}, {"timestamp": "2026-07-25T02:23:23Z", "date_only": false, "value": "2026-07-25T02:23:23+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2026-16723", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "ac903c11-aca3-458f-a80d-d45bf742c563", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-25T02:23:23Z", "date_only": false, "value": "2026-07-25T02:23:23.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2026-16723", "field": "evidence.0.details.added_date", "uuid": "ac903c11-aca3-458f-a80d-d45bf742c563", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-25T02:23:23Z", "date_only": false, "value": "2026-07-25T02:23:23+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2026-16723", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "ac903c11-aca3-458f-a80d-d45bf742c563", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-25T02:23:23Z", "date_only": false, "value": "2026-07-25T02:23:23+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2026-16723", "field": "status.status_updated_at", "uuid": "ac903c11-aca3-458f-a80d-d45bf742c563", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-25T02:23:48.708Z", "date_only": false, "value": "2026-07-25T02:23:48.708650Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mrgsqxehey2l", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "4c673004-5b8d-449a-9d38-d2017cb527e9", "content": "FastJson RCE vulnerability CVE-2026-16723 is exploited in the wild. Details and PoC exploit code are public for this critical remote code execution flaw.\n\n#FastJson #CVE202616723 #RCE #ZeroDay", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mrgsqxehey2l"}, {"timestamp": "2026-07-25T12:00:01Z", "date_only": false, "value": "2026-07-25T12:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2026-16723", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "ac903c11-aca3-458f-a80d-d45bf742c563", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-25T12:00:27.603Z", "date_only": false, "value": "2026-07-25T12:00:27.603734Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ac903c11-aca3-458f-a80d-d45bf742c563", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "ada1b63a-1c35-418e-93c3-5a81d3dca717", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ac903c11-aca3-458f-a80d-d45bf742c563", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-25T14:04:56.562Z", "date_only": false, "value": "2026-07-25T14:04:56.562808Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/etairos-ai.bsky.social/post/3mrhzwo66tx2c", "record": "cve-2026-16723", "field": "creation_timestamp", "uuid": "b1e8dfa3-9973-4020-923b-9a5a654ae363", "content": "Fastjson 1.x zero-day (CVE-2026-16723): unauthenticated RCE, no patch available. Legacy Fastjson in ICS or critical infra should be treated as exposed now. #ThreatIntel #ICS #CyberSecurity\nhttps://threat-intelligence.redeyesecurity.com/blog/fastjson-1x-rce-cve-2026-16723-no-patch-2026", "url": "https://bsky.app/profile/etairos-ai.bsky.social/post/3mrhzwo66tx2c"}, {"timestamp": "2026-07-25T15:00:20.705Z", "date_only": false, "value": "2026-07-25T15:00:20.705715Z", "kind": "sighting", "label": "Seen", "source": "Telegram/miFQN7X72jRRW6EY2gS7CQFdpGF0_8e-raRmF79rh9lBiw", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "e723ab39-7cf2-41a7-9d7f-5a916ed13793"}, {"timestamp": "2026-07-25T15:00:24.934Z", "date_only": false, "value": "2026-07-25T15:00:24.934172Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mri4zucu4h2o", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "d3ad9086-a555-4b1b-b00e-0828969ade33", "content": "CVE-2026-16723 is being exploited in Spring Boot fat-JAR apps using Fastjson 1.x, enabling unauthenticated code execution. No patched 1.x fix is available yet; Alibaba advises SafeMode or migration. #Fastjson #SpringBoot #Alibaba", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mri4zucu4h2o"}, {"timestamp": "2026-07-25T15:06:57.536Z", "date_only": false, "value": "2026-07-25T15:06:57.536207Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mri5flcwiv2p", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "c0a5924e-076a-43b7-91dd-9614c03c17e0", "content": "\ud83e\udd16 CVE-2026-16723 (CVSS 9.0): Critical RCE in Alibaba's Fastjson 1.x actively exploited \u2014 no patch available. Malicious JSON \u2192 RCE on Spring Boot apps. https://thehackernews.com/2026/07/fastjson-1x-rce-vulnerability-targeted.html", "url": "https://bsky.app/profile/newssecia.bsky.social/post/3mri5flcwiv2p"}, {"timestamp": "2026-07-25T15:11:05.202Z", "date_only": false, "value": "2026-07-25T15:11:05.202419Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mri5mwjthc2s", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "0df6765d-ca43-4f32-8e85-eeeaeeeb71d1", "content": "Critical Spring Boot Security Alert: CVE-2026-16723 Exposes Fastjson Applications to Unauthenticated Remote Code Execution +\u00a0Video\n\nIntroduction: A New Java Security Threat Emerges The cybersecurity community is warning developers and organizations about a newly exploited vulnerability affecting\u2026", "url": "https://bsky.app/profile/undercodenews.bsky.social/post/3mri5mwjthc2s"}, {"timestamp": "2026-07-25T16:00:51.995Z", "date_only": false, "value": "2026-07-25T16:00:51.995052Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2026/07/fastjson-1x-rce-vulnerability-targeted.html", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "dfc06994-533a-458c-8b61-03596d7579b4", "content": "Security firms ThreatBook and Imperva say attackers are targeting a critical flaw in Fastjson, Alibaba's JSON library for Java. In affected Spring Boot applications, a malicious JSON request can execute code without authentication, with the privileges of the Java process.\n\nTracked as CVE-2026-16723, the vulnerability carries an Alibaba-assigned CVSS score of 9.0. The confirmed chain requires", "url": "https://thehackernews.com/2026/07/fastjson-1x-rce-vulnerability-targeted.html"}, {"timestamp": "2026-07-25T20:00:03.395Z", "date_only": false, "value": "2026-07-25T20:00:03.395772Z", "kind": "sighting", "label": "Seen", "source": "Telegram/nPdorxgilRpeUK74owvb_SQJPx7ceIG4883buRWavnmG2X8", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "cdf77187-416f-4881-b205-f97a96d91050"}, {"timestamp": "2026-07-25T23:00:03.205Z", "date_only": false, "value": "2026-07-25T23:00:03.205255Z", "kind": "sighting", "label": "Seen", "source": "Telegram/rReBw0Q4jMbZrY7xLybdVTPGa0Ybeq3C-HMv0PXt8kiNSpo", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "ee80eb10-bd20-40f6-ae67-badc86a0c44d"}, {"timestamp": "2026-07-25T23:14:52.891Z", "date_only": false, "value": "2026-07-25T23:14:52.891898Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mriyo2it4n2s", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "3cc0a823-2f3a-4e51-b3ca-83455961612f", "content": "\ud83e\udd16 CVE-2026-16723 (CVSS 9.0): RCE in Alibaba Fastjson 1.x affecting Spring Boot apps. No patch available \u2014 actively exploited. Unauthenticated JSON requests can execute code.\nhttps://thehackernews.com/2026/07/fastjson-1x-rce-vulnerability-targeted.html", "url": "https://bsky.app/profile/newssecia.bsky.social/post/3mriyo2it4n2s"}, {"timestamp": "2026-07-26T00:00:28.302Z", "date_only": false, "value": "2026-07-26T00:00:28.302345Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/rReBw0Q4jMbZrY7xLybdVTPGa0Ybeq3C-HMv0PXt8kiNSpo", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "de443f7a-3dd5-4a53-845a-5cb08ba2e0e7", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-26T00:00:32.428Z", "date_only": false, "value": "2026-07-26T00:00:32.428976Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/nPdorxgilRpeUK74owvb_SQJPx7ceIG4883buRWavnmG2X8", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "d39ee5b4-2473-4030-b431-4d953133c17d", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-26T09:25:23.849Z", "date_only": false, "value": "2026-07-26T09:25:23.849096Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mrk2rpyxzq2p", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "44d759c3-5e54-470e-b937-ca1053101c10", "content": "\ud83e\udd16 CVE-2026-16723 (CVSS 9.0): Critical unauthenticated RCE in Alibaba Fastjson 1.x, actively exploited with no patch available. Affects Spring Boot applications.\nhttps://thehackernews.com/2026/07/fastjson-1x-rce-vulnerability-targeted.html", "url": "https://bsky.app/profile/newssecia.bsky.social/post/3mrk2rpyxzq2p"}, {"timestamp": "2026-07-26T10:57:36.958Z", "date_only": false, "value": "2026-07-26T10:57:36.958191Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/obivan/statuses/116985918688365538", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "55c9b120-2ae8-4afd-8dd5-2bb25c29f0d2", "content": "FastJson 1.2.83 RCE (CVE-2026-16723) https://fearsoff.org/research/fastjson-1-2-83-rce", "url": "https://infosec.exchange/users/obivan/statuses/116985918688365538"}, {"timestamp": "2026-07-26T10:57:46.267Z", "date_only": false, "value": "2026-07-26T10:57:46.267448Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/obivan.infosec.exchange.ap.brid.gy/post/3mrk7wpxalfm2", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "28a38833-36ee-43e5-8cde-db040bf18ee6", "content": "FastJson 1.2.83 RCE (CVE-2026-16723) https://fearsoff.org/research/fastjson-1-2-83-rce", "url": "https://bsky.app/profile/obivan.infosec.exchange.ap.brid.gy/post/3mrk7wpxalfm2"}, {"timestamp": "2026-07-26T23:30:08.772Z", "date_only": false, "value": "2026-07-26T23:30:08.772614Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/technoholic.bsky.social/post/3mrljybienv2m", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "8f4e239f-d083-4d4a-87f7-4f3050c2e493", "content": "ThreatBook & Imperva warn attackers exploit CVE-2026-16723, a critical flaw in Alibaba's Fastjson (CVSS 9.0). Malicious JSON can execute code in Spring Boot apps without auth. Stay updated!", "url": "https://bsky.app/profile/technoholic.bsky.social/post/3mrljybienv2m"}, {"timestamp": "2026-07-27T02:47:32.918Z", "date_only": false, "value": "2026-07-27T02:47:32.918878Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mrluzajiyn2t", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "25064848-5f2e-4d6d-85d6-9b1ac1877960", "content": "FastJson\u306eRCE\u8106\u5f31\u6027CVE-2026-16723\u304c\u5b9f\u969b\u306b\u60aa\u7528\u3055\u308c\u3001\u8a73\u7d30\u3068PoC\u30a8\u30af\u30b9\u30d7\u30ed\u30a4\u30c8\u30b3\u30fc\u30c9\u304c\u516c\u958b\u3055\u308c\u305f \n\nFastJson RCE CVE-2026-16723 Exploited in the Wild as Details and PoC Exploit Code Go Public  #DailyCyberSecurity (Jul 25)\n\nsecurityonline.info/fastjson-rce...", "url": "https://bsky.app/profile/kitafox.bsky.social/post/3mrluzajiyn2t"}, {"timestamp": "2026-07-27T13:34:19.922Z", "date_only": false, "value": "2026-07-27T13:34:19.922932Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/techoverload.bsky.social/post/3mrmz5s2mwl2w", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "d9c7e638-5501-40b7-8595-a999f5c5adff", "content": "Fastjson 1.x RCE (CVE-2026-16723) is being actively exploited \u2014 and there's no patch. A single malicious JSON request can run code on Spring Boot fat-JAR apps without auth. If you use Fastjson 1.x, enable SafeMode or migrate to fastjson2 now. \ud83d\uded1\n\n#Cybersecurity #Java #Security", "url": "https://bsky.app/profile/techoverload.bsky.social/post/3mrmz5s2mwl2w"}, {"timestamp": "2026-07-27T16:00:06.299Z", "date_only": false, "value": "2026-07-27T16:00:06.299064Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/bdufstecru/3346", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "69bc62e0-3df8-44b7-8646-23a510cca426", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 AutoType \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u044f\u0437\u044b\u043a\u0430 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f Java Fastjson \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\nBDU:2026-10492\nCVE-2026-16723\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://github.com/alibaba/fastjson2/wiki/Security-Advisory:-Remote-Code-Execution-in-fastjson-1.2.68%E2%80%931.2.83", "url": "https://t.me/bdufstecru/3346"}, {"timestamp": "2026-07-27T17:00:16.125Z", "date_only": false, "value": "2026-07-27T17:00:16.125108Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mrnenzzeim2q", "record": "cve-2026-16723", "field": "creation_timestamp", "uuid": "81904328-cb23-4707-81ca-26ed8e7add12", "content": "\ud83d\udce2 CVE-2026-16723 : RCE dans FastJson 1.2.83 via SSRF et chargement de classe distante\n\ud83d\udcdd ## \ud83d\udd0d Contexte\n\nPubli\u00e9 le 21 juillet 2026 par la soci\u00e9t\u00e9 FearsOff \u2026\nhttps://cyberveille.ch/posts/2026-07-27-cve-2026-16723-rce-dans-fastjson-1-2-83-via-ssrf-et-chargement-de-classe-distante/ #AutoType #Cyberveille", "url": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mrnenzzeim2q"}, {"timestamp": "2026-07-28T00:00:31.966Z", "date_only": false, "value": "2026-07-28T00:00:31.966112Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/bdufstecru/3346", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "03a17299-fb77-4439-86b7-736f56870e17", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 AutoType \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u044f\u0437\u044b\u043a\u0430 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f Java Fastjson \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\nBDU:2026-10492\nCVE-2026-16723\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://github.com/alibaba/fastjson2/wiki/Security-Advisory:-Remote-Code-Execution-in-fastjson-1.2.68%E2%80%931.2.83", "url": "https://t.me/bdufstecru/3346", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-28T00:13:38.131Z", "date_only": false, "value": "2026-07-28T00:13:38.131330Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pixelsandpulse.bsky.social/post/3mro4uxcuhk2e", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "64b92ed9-4ee8-44f1-8505-d5c1bd1b5792", "content": "Fastjson 1.x users, listen up: A critical RCE zero-day (CVE-2026-16723) is being actively exploited against US financial, healthcare, and retail firms. The worst part? There's no official patch, leaving even updated systems\u2026\n\nhttps://www.tpp.blog/12lb7zq\n\n#cybersecurity #fastjson #cve202616723", "url": "https://bsky.app/profile/pixelsandpulse.bsky.social/post/3mro4uxcuhk2e"}, {"timestamp": "2026-07-28T02:00:23.937Z", "date_only": false, "value": "2026-07-28T02:00:23.937442Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mroctugfrm2j", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "4b13c38e-1387-4864-a02d-11c19dd090de", "content": "Hackers are exploiting FastJson CVE-2026-16723 for remote code execution without interaction or privileges, with U.S. firms in finance, healthcare, retail, and tech among the main targets. #FastJson #USA #RCE", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mroctugfrm2j"}, {"timestamp": "2026-07-28T02:11:56.981Z", "date_only": false, "value": "2026-07-28T02:11:56.981638Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mrodij64xh2z", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "5b5cbb07-905f-4f1e-bdc0-68f46b79b450", "content": "FastJson CVE-2026-16723 Exploited in Real-World Attacks as Hackers Target US Organizations Through Critical Remote Code Execution Flaws +\u00a0Video\n\nIntroduction: A New Wave of Exploitation Shows How Fast Vulnerabilities Become Weapons The cybersecurity landscape continues to demonstrate a dangerous\u2026", "url": "https://bsky.app/profile/undercodenews.bsky.social/post/3mrodij64xh2z"}, {"timestamp": "2026-07-28T04:00:05.259Z", "date_only": false, "value": "2026-07-28T04:00:05.259936Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/95452", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "643c9cf2-4ac5-4c18-a0f2-fb8862ae6e95", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a fastjson-rce-lab\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a why-success\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-28 02:58:03\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nFastjson 1.2.83 RCE \u9776\u573a\u73af\u5883 (CVE-2026-16723)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/95452"}, {"timestamp": "2026-07-28T09:15:24.637Z", "date_only": false, "value": "2026-07-28T09:15:24.637233Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mrp35pxz222m", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "b8b1d15f-982c-47e1-8927-d33bbc92f694", "content": "Critical Fastjson RCE CVE-2026-16723 is being actively exploited in Spring Boot fat-jar deployments and Fastjson 1.x. Fastjson 2.x or SafeMode reduces exposure. #Fastjson #CVE2026 #Alibaba", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mrp35pxz222m"}, {"timestamp": "2026-07-28T11:00:06.765Z", "date_only": false, "value": "2026-07-28T11:00:06.765506Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/HackerNewscyber/3292", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "e0693a99-b494-4b5a-b4f0-7cc55611b412", "content": "\u2708\ufe0f \u062f\u0648 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062e\u0637\u0631\u0646\u0627\u06a9 \u062f\u0631 FortiOS \u0648 Fastjson \u0639\u0644\u06cc\u200c\u0628\u0627\u0628\u0627 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0634\u062f\n\n\ud83c\udfa5\u0641\u0648\u0631\u062a\u06cc\u0646\u062a \u0627\u0632 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 SSL-VPN \u0633\u06cc\u0633\u062a\u0645\u200c\u0639\u0627\u0645\u0644 FortiOS \u062e\u0628\u0631 \u062f\u0627\u062f \u06a9\u0647 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u0628\u0627 \u0627\u0631\u0633\u0627\u0644 \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u200c\u0647\u0627\u06cc HTTP \u062f\u0633\u062a\u06a9\u0627\u0631\u06cc\u200c\u0634\u062f\u0647\u060c \u0648\u0635\u0644\u0647\u200c\u06cc \u0642\u0628\u0644\u06cc \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u0645\u06a9\u0627\u0646\u06cc\u0632\u0645 symbolic link \u0631\u0627 \u062f\u0648\u0631 \u0628\u0632\u0646\u062f\u061b \u0627\u0644\u0628\u062a\u0647 \u067e\u06cc\u0634\u200c\u0634\u0631\u0637 \u0622\u0646\u060c \u0646\u0641\u0648\u0630 \u0642\u0628\u0644\u06cc \u0645\u0647\u0627\u062c\u0645 \u0628\u0647 \u0633\u0637\u062d \u0641\u0627\u06cc\u0644\u200c\u0633\u06cc\u0633\u062a\u0645 \u062f\u0633\u062a\u06af\u0627\u0647 \u0627\u0633\u062a. \u062c\u0632\u0626\u06cc\u0627\u062a \u0646\u062d\u0648\u0647 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0648 \u0639\u0627\u0645\u0644 \u062d\u0645\u0644\u0627\u062a \u0647\u0646\u0648\u0632 \u0645\u0634\u062e\u0635 \u0646\u06cc\u0633\u062a \u0648 \u0622\u0698\u0627\u0646\u0633\u200c\u0647\u0627\u06cc \u0641\u062f\u0631\u0627\u0644 \u0622\u0645\u0631\u06cc\u06a9\u0627 \u062a\u0627 \u06f1\u06f0 \u0627\u0648\u062a \u06f2\u06f0\u06f2\u06f6 \u0645\u0647\u0644\u062a \u062f\u0627\u0631\u0646\u062f \u0648\u0635\u0644\u0647 \u0631\u0627 \u0646\u0635\u0628 \u06a9\u0646\u0646\u062f.\n\n\ud83c\udfa5\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u06cc\u06af\u0631\u060c CVE-2026-16723 \u0628\u0627 \u0627\u0645\u062a\u06cc\u0627\u0632 \u06f9.\u06f0 \u0627\u0632 \u06f1\u06f0\u060c \u062f\u0631 \u06a9\u062a\u0627\u0628\u062e\u0627\u0646\u0647 Fastjson \u0639\u0644\u06cc\u200c\u0628\u0627\u0628\u0627 \u0627\u0633\u062a \u06a9\u0647 \u0628\u062f\u0648\u0646 \u0646\u06cc\u0627\u0632 \u0628\u0647 \u062a\u0639\u0627\u0645\u0644 \u06a9\u0627\u0631\u0628\u0631 \u0627\u0645\u06a9\u0627\u0646 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0631\u0627 \u0645\u06cc\u200c\u062f\u0647\u062f. \u0627\u06cc\u0646 \u0646\u0642\u0635 \u0647\u0646\u0648\u0632 \u0648\u0635\u0644\u0647 \u0646\u0634\u062f\u0647 \u0648 \u0628\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u06f1.\u06f2.\u06f6\u06f8 \u062a\u0627 \u06f1.\u06f2.\u06f8\u06f3 \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f \u0641\u0648\u0631\u0627\u064b SafeMode \u0631\u0627 \u0641\u0639\u0627\u0644 \u06cc\u0627 \u0628\u0647 \u0646\u0633\u062e\u0647 \u0627\u0645\u0646 \u0645\u0647\u0627\u062c\u0631\u062a \u06a9\u0646\u0646\u062f.\n\n\n\u2708\ufe0f @HackerNewsCyber", "url": "https://t.me/HackerNewscyber/3292"}, {"timestamp": "2026-07-28T14:00:05.142Z", "date_only": false, "value": "2026-07-28T14:00:05.142521Z", "kind": "sighting", "label": "Seen", "source": "Telegram/TTDc5m9rjxOF-FLNkY4srXBXmccnJEZ8Ua1WlC6sUt3lKgo", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "0a9e10df-6b0a-40e5-bf4c-69e9b532b512"}, {"timestamp": "2026-07-28T14:00:05.221Z", "date_only": false, "value": "2026-07-28T14:00:05.221623Z", "kind": "sighting", "label": "Seen", "source": "Telegram/sy-gY02N2vY61unP8KTQmhG6Lrt3BtaNuULshxLDg-pvnZw", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "8748b749-acf3-4221-ba6e-23f94bf22548"}, {"timestamp": "2026-07-28T16:00:08.763Z", "date_only": false, "value": "2026-07-28T16:00:08.763361Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/8450", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "ceffb140-142e-49c2-bd2f-81cf2bbc8966", "content": "\u0425\u0430\u043a\u0435\u0440\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 Java-\u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 FastJson, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0431\u0435\u0437 \u0443\u0447\u0430\u0441\u0442\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438\u043b\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439.\n\nFastJson - \u044d\u0442\u043e \u043e\u0434\u043d\u0430 \u0438\u0437 \u0441\u0430\u043c\u044b\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a \u0432 \u044d\u043a\u043e\u0441\u0438\u0441\u0442\u0435\u043c\u0435 Java \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c,\u00a0\u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u0430\u044f Alibaba, \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0441 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 JSON.\n\n\u041f\u0440\u043e\u0435\u043a\u0442 \u0438\u043c\u0435\u0435\u0442 25 600 \u0437\u0432\u0435\u0437\u0434 \u0438 6 400 \u0444\u043e\u0440\u043a\u043e\u0432 \u043d\u0430 GitHub \u0438 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u0435\u043d \u0432 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u043c \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u0435 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u041f\u041e \u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u0445, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 Alibaba.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 FastJson \u043e\u0442 1.2.68 \u0434\u043e 1.2.83. \u042d\u0442\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0432\u0435\u0440\u0441\u0438\u044f \u0432\u0435\u0442\u043a\u0438 1.x, \u0431\u044b\u043b\u0430 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u0430 \u0432 \u043c\u0430\u0435 2022 \u0433\u043e\u0434\u0430. \u0412\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u044d\u0442\u043e \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f, \u043d\u043e \u043e\u043d\u0430, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u043a\u0430\u0436\u0434\u043e\u0439 \u0431\u0430\u043d\u043a\u043e\u0432\u0441\u043a\u043e\u0439 \u0438 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0439 \u0441\u0435\u0442\u0438.\n\n\u0410\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0430\u0447\u0430\u043b\u0430\u0441\u044c \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435, \u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0439 \u0434\u0435\u043d\u044c \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f FearsOff \u043e\u0431\u043d\u0430\u0440\u043e\u0434\u043e\u0432\u0430\u043b\u0430 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e \u043d\u0435\u0439.\n\n\u0410\u0442\u0430\u043a\u0438, \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u0437\u0430\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 Imperva \u0438 ThreatBook, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u044b \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u00a0CVE-2026-16723, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0432 Java-\u043f\u0440\u043e\u0435\u043a\u0442\u0430\u0445, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 Fastjson \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0438, \u0447\u0442\u043e \u043e\u043d\u0430 \u00ab\u043d\u0430\u0446\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u0448\u0438\u0440\u043e\u043a\u0438\u0439 \u043a\u0440\u0443\u0433 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u0432 \u0441\u0444\u0435\u0440\u0435 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u044b\u0445 \u0443\u0441\u043b\u0443\u0433, \u0437\u0434\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f, \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439, \u0440\u043e\u0437\u043d\u0438\u0447\u043d\u043e\u0439 \u0442\u043e\u0440\u0433\u043e\u0432\u043b\u0438, \u0431\u0438\u0437\u043d\u0435\u0441\u0430 \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043e\u0442\u0440\u0430\u0441\u043b\u044f\u0445\u00bb.\n\n\u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0430\u0442\u0430\u043a\u0438 \u043f\u043e\u0447\u0442\u0438 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u043d\u0430 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438, \u0431\u0430\u0437\u0438\u0440\u0443\u044e\u0449\u0438\u0435\u0441\u044f \u0432 \u0421\u0428\u0410, \u043d\u0430\u0440\u044f\u0434\u0443 \u0441 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u043c\u0438 \u0430\u0442\u0430\u043a\u0430\u043c\u0438 \u0432 \u0421\u0438\u043d\u0433\u0430\u043f\u0443\u0440\u0435 \u0438 \u041a\u0430\u043d\u0430\u0434\u0435, \u0445\u043e\u0442\u044f, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u044d\u0442\u0430 \u0442\u0435\u043d\u0434\u0435\u043d\u0446\u0438\u044f \u0431\u0443\u0434\u0435\u0442 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0442\u044c \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0442\u044c\u0441\u044f \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043b\u043e\u0433\u0438\u043a\u043e\u0439 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0442\u0438\u043f\u043e\u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u043f\u043e\u0438\u0441\u043a \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c, \u043f\u0440\u0435\u0436\u0434\u0435 \u0447\u0435\u043c \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f AutoType. \u042d\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f\u0445 Spring Boot \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c fat-JAR-\u0444\u0430\u0439\u043b\u043e\u0432.\n\n\u0417\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u044f\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 type, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u043c\u043e\u0433\u043b\u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043a\u043b\u0430\u0441\u0441\u044b \u0431\u0435\u0437 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 AutoType \u0438 \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u0446\u0435\u043f\u043e\u0447\u0435\u043a \u0433\u0430\u0434\u0436\u0435\u0442\u043e\u0432.\n\n\u0412 \u0441\u0432\u043e\u0435\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 Alibaba \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430, \u0447\u0442\u043e \u043e\u043d\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0432 \u00ab\u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u043e\u0439 \u043c\u043e\u0434\u0435\u043b\u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f Spring Boot\u00bb.\n\n\u0415\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c \u0443\u0441\u043b\u043e\u0432\u0438\u0435\u043c \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u043e, \u0447\u0442\u043e \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u043e\u0431\u044a\u0435\u043a\u0442 \u0434\u043e\u043b\u0436\u0435\u043d \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c\u0441\u044f \u043a\u0430\u043a \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u0444\u0430\u0439\u043b Spring Boot fat-jar (\u0442.\u0435., \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c\u044b\u0439 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u043c\u0430\u043d\u0434\u044b java -jar xxx.jar).\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u0443\u043a\u0430\u0437\u0430\u043d\u0438\u0435 \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u043a\u043b\u0430\u0441\u0441\u0430 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043d\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 CVE-2026-16723, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b \u0432 \u043f\u043e\u043b\u044f \u00abObject\u00bb \u0438\u043b\u0438 \u00abMap\u00bb.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u0430\u044f \u043b\u043e\u0433\u0438\u043a\u0430 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0442\u0438\u043f\u043e\u0432 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 fastjson2, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043c\u043e\u0434\u0435\u043b\u044c \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u0430 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u043d\u044b\u0445 \u0442\u0438\u043f\u043e\u0432 \u0434\u043b\u044f \u043f\u043e\u043b\u0438\u043c\u043e\u0440\u0444\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u043d\u0435 \u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f \u043d\u0430 \u0430\u043d\u043d\u043e\u0442\u0430\u0446\u0438\u044e JSONType \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0441\u0438\u0433\u043d\u0430\u043b\u0430 \u0434\u043e\u0432\u0435\u0440\u0438\u044f.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0432\u0435\u0440\u0441\u0438\u0438 FastJson 1.2.60 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043b\u044e\u0431\u044b\u0435 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f, \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0444\u043e\u0440\u043c\u0430\u0442 fat-JAR, \u0442\u0430\u043a\u0436\u0435 \u043d\u0435 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b.\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u043c \u0432\u0435\u0440\u0441\u0438\u044e \u0438\u0437 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u043e\u0433\u043e \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430, \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0439 \u0440\u0435\u0436\u0438\u043c (SafeMode) \u0438\u043b\u0438 \u043f\u0435\u0440\u0435\u043a\u043b\u044e\u0447\u0438\u0442\u044c\u0441\u044f \u043d\u0430 \u0441\u0431\u043e\u0440\u043a\u0443, \u043d\u0435 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u0443\u044e \u044d\u0442\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439.\n\n\u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f CVE-2026-16723 \u043d\u0435 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043e. Imperva \u0442\u0430\u043a\u0436\u0435 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e FastJson 1.x \u0431\u043e\u043b\u044c\u0448\u0435 \u043d\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043c\u0430\u043b\u043e\u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0447\u0442\u043e \u043e\u043d \u043f\u043e\u043b\u0443\u0447\u0438\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.", "url": "https://t.me/true_secator/8450"}, {"timestamp": "2026-07-28T19:43:44.097Z", "date_only": false, "value": "2026-07-28T19:43:44.097863Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/suriq.io/post/3mrq6baejpx2u", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "8cbc9e9f-0b3f-4ed6-9789-ebed67245954", "content": "\ud83d\udd34 EXPLOITED\n\nFastjson 1.x, a widely used Java JSON library, has a critical flaw (CVE-2026-16723) now exploited against US firms.\n\nOnly Spring Boot fat-JAR apps are hit, and 1.x is end-of-life.\n\nThe fix is fastjson2.", "url": "https://bsky.app/profile/suriq.io/post/3mrq6baejpx2u"}, {"timestamp": "2026-07-28T22:11:24.189Z", "date_only": false, "value": "2026-07-28T22:11:24.189367Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mrqgjbzqll2o", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "23202269-db48-415c-9141-dc6348e49b9e", "content": "A critical RCE vulnerability in Fastjson (CVE-2026-16723) affects versions 1.2.68 to 1.2.83, allowing code execution in Spring Boot applications via malicious JSON requests. Alibaba has not released a patch as of July 25. Organizations are advised to enable SafeMode or migrate to Fastjson2.", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3mrqgjbzqll2o"}, {"timestamp": "2026-07-29T00:00:32.197Z", "date_only": false, "value": "2026-07-29T00:00:32.197773Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/8450", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "06a245af-f4c4-4d6c-ad33-e50731508077", "content": "\u0425\u0430\u043a\u0435\u0440\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 Java-\u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 FastJson, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0431\u0435\u0437 \u0443\u0447\u0430\u0441\u0442\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438\u043b\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439.\n\nFastJson - \u044d\u0442\u043e \u043e\u0434\u043d\u0430 \u0438\u0437 \u0441\u0430\u043c\u044b\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a \u0432 \u044d\u043a\u043e\u0441\u0438\u0441\u0442\u0435\u043c\u0435 Java \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c,\u00a0\u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u0430\u044f Alibaba, \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0441 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 JSON.\n\n\u041f\u0440\u043e\u0435\u043a\u0442 \u0438\u043c\u0435\u0435\u0442 25 600 \u0437\u0432\u0435\u0437\u0434 \u0438 6 400 \u0444\u043e\u0440\u043a\u043e\u0432 \u043d\u0430 GitHub \u0438 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u0435\u043d \u0432 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u043c \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u0435 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u041f\u041e \u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u0445, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 Alibaba.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 FastJson \u043e\u0442 1.2.68 \u0434\u043e 1.2.83. \u042d\u0442\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0432\u0435\u0440\u0441\u0438\u044f \u0432\u0435\u0442\u043a\u0438 1.x, \u0431\u044b\u043b\u0430 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u0430 \u0432 \u043c\u0430\u0435 2022 \u0433\u043e\u0434\u0430. \u0412\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u044d\u0442\u043e \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f, \u043d\u043e \u043e\u043d\u0430, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u043a\u0430\u0436\u0434\u043e\u0439 \u0431\u0430\u043d\u043a\u043e\u0432\u0441\u043a\u043e\u0439 \u0438 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0439 \u0441\u0435\u0442\u0438.\n\n\u0410\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0430\u0447\u0430\u043b\u0430\u0441\u044c \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435, \u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0439 \u0434\u0435\u043d\u044c \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f FearsOff \u043e\u0431\u043d\u0430\u0440\u043e\u0434\u043e\u0432\u0430\u043b\u0430 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e \u043d\u0435\u0439.\n\n\u0410\u0442\u0430\u043a\u0438, \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u0437\u0430\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 Imperva \u0438 ThreatBook, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u044b \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u00a0CVE-2026-16723, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0432 Java-\u043f\u0440\u043e\u0435\u043a\u0442\u0430\u0445, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 Fastjson \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0438, \u0447\u0442\u043e \u043e\u043d\u0430 \u00ab\u043d\u0430\u0446\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u0448\u0438\u0440\u043e\u043a\u0438\u0439 \u043a\u0440\u0443\u0433 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u0432 \u0441\u0444\u0435\u0440\u0435 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u044b\u0445 \u0443\u0441\u043b\u0443\u0433, \u0437\u0434\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f, \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439, \u0440\u043e\u0437\u043d\u0438\u0447\u043d\u043e\u0439 \u0442\u043e\u0440\u0433\u043e\u0432\u043b\u0438, \u0431\u0438\u0437\u043d\u0435\u0441\u0430 \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043e\u0442\u0440\u0430\u0441\u043b\u044f\u0445\u00bb.\n\n\u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0430\u0442\u0430\u043a\u0438 \u043f\u043e\u0447\u0442\u0438 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u043d\u0430 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438, \u0431\u0430\u0437\u0438\u0440\u0443\u044e\u0449\u0438\u0435\u0441\u044f \u0432 \u0421\u0428\u0410, \u043d\u0430\u0440\u044f\u0434\u0443 \u0441 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u043c\u0438 \u0430\u0442\u0430\u043a\u0430\u043c\u0438 \u0432 \u0421\u0438\u043d\u0433\u0430\u043f\u0443\u0440\u0435 \u0438 \u041a\u0430\u043d\u0430\u0434\u0435, \u0445\u043e\u0442\u044f, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u044d\u0442\u0430 \u0442\u0435\u043d\u0434\u0435\u043d\u0446\u0438\u044f \u0431\u0443\u0434\u0435\u0442 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0442\u044c \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0442\u044c\u0441\u044f \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043b\u043e\u0433\u0438\u043a\u043e\u0439 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0442\u0438\u043f\u043e\u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u043f\u043e\u0438\u0441\u043a \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c, \u043f\u0440\u0435\u0436\u0434\u0435 \u0447\u0435\u043c \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f AutoType. \u042d\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f\u0445 Spring Boot \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c fat-JAR-\u0444\u0430\u0439\u043b\u043e\u0432.\n\n\u0417\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u044f\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 type, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u043c\u043e\u0433\u043b\u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043a\u043b\u0430\u0441\u0441\u044b \u0431\u0435\u0437 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 AutoType \u0438 \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u0446\u0435\u043f\u043e\u0447\u0435\u043a \u0433\u0430\u0434\u0436\u0435\u0442\u043e\u0432.\n\n\u0412 \u0441\u0432\u043e\u0435\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 Alibaba \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430, \u0447\u0442\u043e \u043e\u043d\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0432 \u00ab\u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u043e\u0439 \u043c\u043e\u0434\u0435\u043b\u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f Spring Boot\u00bb.\n\n\u0415\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c \u0443\u0441\u043b\u043e\u0432\u0438\u0435\u043c \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u043e, \u0447\u0442\u043e \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u043e\u0431\u044a\u0435\u043a\u0442 \u0434\u043e\u043b\u0436\u0435\u043d \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c\u0441\u044f \u043a\u0430\u043a \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u0444\u0430\u0439\u043b Spring Boot fat-jar (\u0442.\u0435., \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c\u044b\u0439 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u043c\u0430\u043d\u0434\u044b java -jar xxx.jar).\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u0443\u043a\u0430\u0437\u0430\u043d\u0438\u0435 \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u043a\u043b\u0430\u0441\u0441\u0430 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043d\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 CVE-2026-16723, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b \u0432 \u043f\u043e\u043b\u044f \u00abObject\u00bb \u0438\u043b\u0438 \u00abMap\u00bb.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u0430\u044f \u043b\u043e\u0433\u0438\u043a\u0430 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0442\u0438\u043f\u043e\u0432 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 fastjson2, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043c\u043e\u0434\u0435\u043b\u044c \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u0430 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u043d\u044b\u0445 \u0442\u0438\u043f\u043e\u0432 \u0434\u043b\u044f \u043f\u043e\u043b\u0438\u043c\u043e\u0440\u0444\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u043d\u0435 \u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f \u043d\u0430 \u0430\u043d\u043d\u043e\u0442\u0430\u0446\u0438\u044e JSONType \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0441\u0438\u0433\u043d\u0430\u043b\u0430 \u0434\u043e\u0432\u0435\u0440\u0438\u044f.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0432\u0435\u0440\u0441\u0438\u0438 FastJson 1.2.60 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043b\u044e\u0431\u044b\u0435 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f, \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0444\u043e\u0440\u043c\u0430\u0442 fat-JAR, \u0442\u0430\u043a\u0436\u0435 \u043d\u0435 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b.\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u043c \u0432\u0435\u0440\u0441\u0438\u044e \u0438\u0437 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u043e\u0433\u043e \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430, \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0439 \u0440\u0435\u0436\u0438\u043c (SafeMode) \u0438\u043b\u0438 \u043f\u0435\u0440\u0435\u043a\u043b\u044e\u0447\u0438\u0442\u044c\u0441\u044f \u043d\u0430 \u0441\u0431\u043e\u0440\u043a\u0443, \u043d\u0435 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u0443\u044e \u044d\u0442\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439.\n\n\u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f CVE-2026-16723 \u043d\u0435 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043e. Imperva \u0442\u0430\u043a\u0436\u0435 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e FastJson 1.x \u0431\u043e\u043b\u044c\u0448\u0435 \u043d\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043c\u0430\u043b\u043e\u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0447\u0442\u043e \u043e\u043d \u043f\u043e\u043b\u0443\u0447\u0438\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.", "url": "https://t.me/true_secator/8450", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-29T00:00:34.220Z", "date_only": false, "value": "2026-07-29T00:00:34.220254Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/sy-gY02N2vY61unP8KTQmhG6Lrt3BtaNuULshxLDg-pvnZw", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "cc1b6f70-ac9c-4559-ae74-e86e3a5949da", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-29T00:00:34.354Z", "date_only": false, "value": "2026-07-29T00:00:34.354938Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/TTDc5m9rjxOF-FLNkY4srXBXmccnJEZ8Ua1WlC6sUt3lKgo", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "c71cf509-3f66-417b-a043-eaa5f2f0dbfa", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-29T00:00:48.190Z", "date_only": false, "value": "2026-07-29T00:00:48.190472Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/95452", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "15fdc64f-0022-4d15-9a9b-9f66e09a620a", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a fastjson-rce-lab\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a why-success\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-28 02:58:03\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nFastjson 1.2.83 RCE \u9776\u573a\u73af\u5883 (CVE-2026-16723)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/95452", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-29T05:38:07.503Z", "date_only": false, "value": "2026-07-29T05:38:07.503123Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mrr7hhz23sa5", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "dcb89928-0bef-4594-b5cb-35f33b16966f", "content": "\u30d1\u30c3\u30c1\u672a\u63d0\u4f9b\u306eFastjson\u306e\u8106\u5f31\u6027\u3001\u653b\u6483\u306b\u60aa\u7528\u3055\u308c\u308b\uff08CVE-2026-16723\uff09 | Codebook\uff5cSecurity News https://codebook.machinarecord.com/threatreport/silobreaker-cyber-alert/46925/", "url": "https://bsky.app/profile/shiojiri.com/post/3mrr7hhz23sa5"}, {"timestamp": "2026-07-29T12:34:20.866Z", "date_only": false, "value": "2026-07-29T12:34:20.866992Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mrrwqemfql2p", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "a6773f15-ea11-4224-8748-1cbb12c0d4d0", "content": "Discover the critical Fastjson RCE CVE-2026-16723 vulnerability. Learn how attackers exploit Spring Boot applications and find mitigation strategies.\n\n#Fastjson #CVE202616723 #Cybersecurity #SpringBoot #Malware", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mrrwqemfql2p"}, {"timestamp": "2026-07-29T12:42:16.687Z", "date_only": false, "value": "2026-07-29T12:42:16.687388Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mrrx6k6tiu22", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "3843ccea-0205-4f3a-b1a1-b6a29f4a2029", "content": "Fastjson RCE CVE-2026-16723:Spring Boot\u3092\u63fa\u308b\u304c\u3059\u91cd\u5927\u306a\u8106\u5f31\u6027\n\nFastjson\u30d0\u30fc\u30b8\u30e7\u30f31.2.83\u306f\u9577\u5e74\u306b\u308f\u305f\u308a\u3001\u3053\u306e\u30e9\u30a4\u30d6\u30e9\u30ea\u306e\u30ec\u30ac\u30b7\u30fc\u7cfb\u7d71\u306b\u304a\u3051\u308b\u5b89\u5168\u6027\u306e\u6700\u5f8c\u306e\u7826\u3068\u3055\u308c\u3066\u304d\u307e\u3057\u305f\u3002\u3057\u304b\u3057\u3001\u65b0\u305f\u306b\u767a\u898b\u3055\u308c\u305f\u8106\u5f31\u6027\u304c\u305d\u306e\u5b89\u5168\u795e\u8a71\u3092\u6253\u3061\u7815\u304d\u307e\u3057\u305f\u3002CVE-2026-16723(CVSS 9.0)\u3068\u547d\u540d\u3055\u308c\u305f\u3053\u306e\u91cd\u5927\u306a\u6b20\u9665\u306f\u3001\u653b\u6483\u8005\u304c\u8106\u5f31\u306aSpring Boo...", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mrrx6k6tiu22"}, {"timestamp": "2026-07-29T16:57:51.636Z", "date_only": false, "value": "2026-07-29T16:57:51.636437Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mrsfhkitd62l", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "bd2e66ff-bbda-4fca-a997-13561d4d5e4e", "content": "\ud83d\udea8 ACTIVE EXPLOITATION: A critical, unpatched RCE zero-day (CVE-2026-16723) in FastJson 1.x is being exploited in the wild. Affects versions 1.2.68-1.2.83. Users must migrate to FastJson2 or enable SafeMode now! #Java #ZeroDay #CyberAttack\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "url": "https://bsky.app/profile/netsecio.bsky.social/post/3mrsfhkitd62l"}, {"timestamp": "2026-07-29T20:06:57.754Z", "date_only": false, "value": "2026-07-29T20:06:57.754495Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mrspzp6se32p", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "0ae8f285-5d1e-4280-b69d-f76700c44f49", "content": "CVE-2026-16723: FastJson 1.x Under Active RCE Zero-Day Attack, Patch Unlikely", "url": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mrspzp6se32p"}, {"timestamp": "2026-07-30T09:00:03.412Z", "date_only": false, "value": "2026-07-30T09:00:03.412750Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/95810", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "c73c4ee0-7e5a-422f-9cdb-01f19723470c", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-16723\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a EQSTLab\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-30 07:44:53\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nFastjson RCE\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/95810"}, {"timestamp": "2026-07-30T14:00:04.557Z", "date_only": false, "value": "2026-07-30T14:00:04.557693Z", "kind": "sighting", "label": "Seen", "source": "Telegram/y-21MzKnE9UtyaE5ab_pL94fhj_dfFdxSXCYpnNpKZOg4AI", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "96b095a1-b84f-4f71-9782-c4fddb566858"}, {"timestamp": "2026-07-30T19:00:04.342Z", "date_only": false, "value": "2026-07-30T19:00:04.342985Z", "kind": "sighting", "label": "Seen", "source": "Telegram/4UmGIQtfBl8KQZeNab7MkdV3KJBv_MFiZ_bvWr3ttjSdt98", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "ffe83fb7-d48e-41e0-9321-b25defb46deb"}, {"timestamp": "2026-07-31T00:00:23.866Z", "date_only": false, "value": "2026-07-31T00:00:23.866846Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/4UmGIQtfBl8KQZeNab7MkdV3KJBv_MFiZ_bvWr3ttjSdt98", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "1282db0d-8b0e-494c-b2be-19d2e4715e7f", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-31T00:00:35.843Z", "date_only": false, "value": "2026-07-31T00:00:35.843995Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/95810", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "5b4a8e9c-df14-4eb2-b8a8-1e35da576c32", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-16723\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a EQSTLab\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-30 07:44:53\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nFastjson RCE\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/95810", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-31T01:00:14.695Z", "date_only": false, "value": "2026-07-31T01:00:14.695728Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/y-21MzKnE9UtyaE5ab_pL94fhj_dfFdxSXCYpnNpKZOg4AI", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "1fe1713f-53bf-42d7-9c74-3c3305f48335", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-31T16:00:03.945Z", "date_only": false, "value": "2026-07-31T16:00:03.945411Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/96024", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "f077194f-5b79-40f7-af1f-e21afb62fa7b", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Fastjson #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-16723\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Nowafen\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C++\n\u2b50 Star\u6570\u91cf\uff1a 2  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-31 14:20:04\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nA critical vulnerability affecting Fastjson versions 1.2.68 \u2013 1.2.83.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/96024"}, {"timestamp": "2026-07-31T18:00:04.131Z", "date_only": false, "value": "2026-07-31T18:00:04.131187Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/96040", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "bb29e75b-e45b-489c-91ff-dd515a84aca4", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Fastjson #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-16723\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 1xPwn\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C++\n\u2b50 Star\u6570\u91cf\uff1a 2  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-31 14:20:04\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nA critical vulnerability affecting Fastjson versions 1.2.68 \u2013 1.2.83.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/96040"}, {"timestamp": "2026-07-31T22:00:02.776Z", "date_only": false, "value": "2026-07-31T22:00:02.776788Z", "kind": "sighting", "label": "Seen", "source": "Telegram/CaZ2R0Efl1eBRVqO-sOZ66dFvtq0H_ENlFRwe45W-O_e0iQ", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "a8b593b1-540b-49c5-bfdf-b8e17ee617d4"}, {"timestamp": "2026-08-01T10:52:58Z", "date_only": false, "value": "2026-08-01T10:52:58.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/timcore_hacking/4971", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "3a6e4c7a-740c-4f9c-82c3-cbf37a1ff4db", "content": "\ud83d\udea8 Fastjson RCE \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u0432 \u0431\u043e\u044e - \u0431\u0435\u0437 \u043f\u0430\u0440\u043e\u043b\u044f, \u0431\u0435\u0437 \u043a\u043b\u0438\u043a\u0430 \u044e\u0437\u0435\u0440\u0430, \u0431\u0435\u0437 \u0433\u0430\u0434\u0436\u0435\u0442\u043e\u0432 \u043d\u0430 classpath. \u041f\u0440\u043e\u0441\u0442\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u043b JSON - \u0438 \u0441\u0435\u0440\u0432\u0435\u0440 \u0442\u0432\u043e\u0439 \ud83d\udc80\n\n \n\u0420\u0430\u0437\u0431\u0438\u0440\u0430\u044e \u043a\u0435\u0439\u0441, \u043a\u043e\u043b\u043b\u0435\u0433\u0438.\n\n \n\ud83d\udd13 \u0422\u043e\u0447\u043a\u0430 \u0432\u0445\u043e\u0434\u0430\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-16723 (CVSS 9.0) \u0441\u0438\u0434\u0438\u0442 \u0432 Alibaba-\u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 Fastjson \u0432\u0435\u0440\u0441\u0438\u0439 1.2.68\u20131.2.83 - \u0442\u043e \u0435\u0441\u0442\u044c \u0431\u0443\u043a\u0432\u0430\u043b\u044c\u043d\u043e \u0432\u043e \u0432\u0441\u0435\u0445 \u0440\u0435\u043b\u0438\u0437\u0430\u0445 1.x, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0439. \u0420\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043f\u043e \u0434\u0435\u0444\u043e\u043b\u0442\u043d\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438: AutoType \u0432\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u043d\u0435 \u043d\u0443\u0436\u043d\u043e, gadget-\u043a\u043b\u0430\u0441\u0441 \u043d\u0430 classpath \u043d\u0435 \u043d\u0443\u0436\u0435\u043d, \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u043d\u0435 \u043d\u0443\u0436\u043d\u0430. \u0414\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043e\u0434\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e JSON-\u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043d\u0430 Spring Boot fat-jar (\u0441\u0430\u043c\u0430\u044f \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u0430\u044f \u0441\u0445\u0435\u043c\u0430 \u0434\u0435\u043f\u043b\u043e\u044f).\n\n \n\ud83d\udc40 \u041c\u0435\u0445\u0430\u043d\u0438\u043a\u0430 - \u043a\u043b\u0430\u0441\u0441\u0438\u043a\u0430 \u0434\u043b\u044f \u0442\u0435\u0445, \u043a\u0442\u043e \u043b\u044e\u0431\u0438\u0442 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e: \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430 \u0442\u0440\u0430\u043a\u0442\u0443\u0435\u0442 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0430\u043d\u043d\u043e\u0442\u0430\u0446\u0438\u0438 @JSONType \u043a\u0430\u043a \"\u0441\u0438\u0433\u043d\u0430\u043b \u0434\u043e\u0432\u0435\u0440\u0438\u044f\" \u043f\u0440\u0438 \u0440\u0435\u0437\u043e\u043b\u0432\u0435 \u0442\u0438\u043f\u0430. \u042d\u0442\u043e \u0432 \u0441\u0432\u044f\u0437\u043a\u0435 \u0441 SSRF-\u043f\u0440\u0438\u043c\u0438\u0442\u0438\u0432\u043e\u043c \u0432\u043d\u0443\u0442\u0440\u0438 checkAutoType \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0432\u0441\u044e \u0437\u0430\u0449\u0438\u0442\u0443 \u0438 \u0434\u043e\u0431\u0440\u0430\u0442\u044c\u0441\u044f \u0434\u043e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043a\u043b\u0430\u0441\u0441\u0430 \u2192 RCE. \u0418\u0442\u043e\u0433: malformed HTTP-\u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430 \u043b\u044e\u0431\u043e\u0439 \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0439 JSON.parse, JSON.parseObject(String) \u0438\u043b\u0438 JSON.parseObject(String, Class) - \u0438 \u0441\u0435\u0440\u0432\u0435\u0440 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u0442\u0432\u043e\u0439 \u043a\u043e\u0434.\n\n \n\u0421\u0430\u043c\u043e\u0435 \u0441\u043e\u0447\u043d\u043e\u0435: \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0430\u0442\u0447\u0430 \u0434\u043b\u044f 1.x \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435\u0442. Alibaba \u043f\u0440\u043e\u0441\u0442\u043e \u0433\u043e\u0432\u043e\u0440\u0438\u0442 \"\u043c\u0438\u0433\u0440\u0438\u0440\u0443\u0439\u0442\u0435 \u043d\u0430 Fastjson2\" - \u0432\u0435\u0440\u0441\u0438\u044f 2.x \u043d\u0435 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u0430.\n\n \n\ud83c\udf0d \u041a\u0442\u043e \u0443\u0436\u0435 \u0441\u043b\u043e\u0432\u0438\u043b\nThreatBook \u0438 Imperva \u0444\u0438\u043a\u0441\u0438\u0440\u0443\u044e\u0442 \u0430\u043a\u0442\u0438\u0432\u043d\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0441 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u0436\u0435\u0440\u0442\u0432\u0430\u043c\u0438 \u0432 \u0444\u0438\u043d\u0442\u0435\u0445\u0435, \u0437\u0434\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u0438, \u0440\u0438\u0442\u0435\u0439\u043b\u0435, \u0431\u0438\u0437\u043d\u0435\u0441-\u0441\u0435\u043a\u0442\u043e\u0440\u0435 - \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u0432 \u0421\u0428\u0410, \u043f\u043b\u044e\u0441 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u0432 \u0421\u0438\u043d\u0433\u0430\u043f\u0443\u0440\u0435 \u0438 \u041a\u0430\u043d\u0430\u0434\u0435. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Imperva, \u043e\u043a\u043e\u043b\u043e 30% \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0438\u0434\u0451\u0442 \u0438\u0437 \u0442\u0443\u043b\u043e\u0432 \u043d\u0430 Ruby \u0438 Go, \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u043e\u0435 \u043c\u0430\u0441\u043a\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043e\u0431\u044b\u0447\u043d\u044b\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u044b. \u041e\u0436\u0438\u0434\u0430\u0435\u043c\u043e - \u0433\u0435\u043e\u0433\u0440\u0430\u0444\u0438\u044f \u0431\u0443\u0434\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u0440\u0430\u0441\u0448\u0438\u0440\u044f\u0442\u044c\u0441\u044f.\n\n \n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c, \u043f\u043e\u043a\u0430 \u043f\u0430\u0442\u0447\u0430 \u043d\u0435\u0442\n\n \n- \u041c\u0438\u0433\u0440\u0438\u0440\u0443\u0439 \u043d\u0430 Fastjson2 - \u0435\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0439 \u043f\u0443\u0442\u044c\n- \u0415\u0441\u043b\u0438 \u043c\u0438\u0433\u0440\u0430\u0446\u0438\u044f \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430 \u043f\u0440\u044f\u043c\u043e \u0441\u0435\u0439\u0447\u0430\u0441 - \u0432\u043a\u043b\u044e\u0447\u0438 SafeMode: -Dfastjson.parser.safeMode=true\n- \u0410\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u0430 - \u0441\u0431\u043e\u0440\u043a\u0430 com.alibaba:fastjson:1.2.83_noneautotype, \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0432\u044b\u0440\u0435\u0437\u0430\u043d \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 AutoType-\u043a\u043e\u0434\n- \u041d\u0430 \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440\u0435 - \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u0439 POST/JSON-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0441 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u0441\u0442\u0440\u043e\u043a\u0430\u043c\u0438 (@type, @JSONType) \u0447\u0435\u0440\u0435\u0437 WAF, \u043f\u043e\u043a\u0430 \u043d\u0435 \u043c\u0438\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u043b\n\n \n\u041c\u043e\u0440\u0430\u043b\u044c: \u0435\u0441\u043b\u0438 \u0442\u0432\u043e\u0439 Java-\u0441\u0442\u0435\u043a \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u0432\u0438\u0441\u0438\u0442 \u043d\u0430 Fastjson 1.x - \u0441\u0447\u0438\u0442\u0430\u0439, \u0447\u0442\u043e \u0442\u0432\u043e\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0443\u0436\u0435 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435, \u043f\u0440\u043e\u0441\u0442\u043e \u043f\u043e\u043a\u0430 \u043e\u0431 \u044d\u0442\u043e\u043c \u043d\u0435 \u0437\u043d\u0430\u0435\u0448\u044c \ud83d\ude0c \u0417\u0430\u0448\u0435\u0439 \u044d\u0442\u043e \u0432 \u043f\u0435\u043d\u0442\u0435\u0441\u0442-\u0447\u0435\u043a\u043b\u0438\u0441\u0442 \u043f\u0440\u044f\u043c\u043e \u0441\u0435\u0433\u043e\u0434\u043d\u044f.\n\n \n#Fastjson #RCE #CVE202616723 #JavaSecurity #SpringBoot #\u041a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #InfoSec #ZeroDay #\u041f\u0435\u043d\u0442\u0435\u0441\u0442 #WAF #\u0414\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f #AppSec #Alibaba #\u0411\u0435\u0437\u041e\u0434\u043d\u043e\u0433\u043e\u0414\u043d\u044f #SecOps", "url": "https://t.me/timcore_hacking/4971", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-01T10:52:58Z", "date_only": false, "value": "2026-08-01T10:52:58.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/timcore_hacking/4971", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "1a1183ef-6afe-4ca4-acad-06f7045436ea", "content": "\ud83d\udea8 Fastjson RCE \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u0432 \u0431\u043e\u044e - \u0431\u0435\u0437 \u043f\u0430\u0440\u043e\u043b\u044f, \u0431\u0435\u0437 \u043a\u043b\u0438\u043a\u0430 \u044e\u0437\u0435\u0440\u0430, \u0431\u0435\u0437 \u0433\u0430\u0434\u0436\u0435\u0442\u043e\u0432 \u043d\u0430 classpath. \u041f\u0440\u043e\u0441\u0442\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u043b JSON - \u0438 \u0441\u0435\u0440\u0432\u0435\u0440 \u0442\u0432\u043e\u0439 \ud83d\udc80\n\n \n\u0420\u0430\u0437\u0431\u0438\u0440\u0430\u044e \u043a\u0435\u0439\u0441, \u043a\u043e\u043b\u043b\u0435\u0433\u0438.\n\n \n\ud83d\udd13 \u0422\u043e\u0447\u043a\u0430 \u0432\u0445\u043e\u0434\u0430\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-16723 (CVSS 9.0) \u0441\u0438\u0434\u0438\u0442 \u0432 Alibaba-\u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 Fastjson \u0432\u0435\u0440\u0441\u0438\u0439 1.2.68\u20131.2.83 - \u0442\u043e \u0435\u0441\u0442\u044c \u0431\u0443\u043a\u0432\u0430\u043b\u044c\u043d\u043e \u0432\u043e \u0432\u0441\u0435\u0445 \u0440\u0435\u043b\u0438\u0437\u0430\u0445 1.x, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0439. \u0420\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043f\u043e \u0434\u0435\u0444\u043e\u043b\u0442\u043d\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438: AutoType \u0432\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u043d\u0435 \u043d\u0443\u0436\u043d\u043e, gadget-\u043a\u043b\u0430\u0441\u0441 \u043d\u0430 classpath \u043d\u0435 \u043d\u0443\u0436\u0435\u043d, \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u043d\u0435 \u043d\u0443\u0436\u043d\u0430. \u0414\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043e\u0434\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e JSON-\u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043d\u0430 Spring Boot fat-jar (\u0441\u0430\u043c\u0430\u044f \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u0430\u044f \u0441\u0445\u0435\u043c\u0430 \u0434\u0435\u043f\u043b\u043e\u044f).\n\n \n\ud83d\udc40 \u041c\u0435\u0445\u0430\u043d\u0438\u043a\u0430 - \u043a\u043b\u0430\u0441\u0441\u0438\u043a\u0430 \u0434\u043b\u044f \u0442\u0435\u0445, \u043a\u0442\u043e \u043b\u044e\u0431\u0438\u0442 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e: \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430 \u0442\u0440\u0430\u043a\u0442\u0443\u0435\u0442 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0430\u043d\u043d\u043e\u0442\u0430\u0446\u0438\u0438 @JSONType \u043a\u0430\u043a \"\u0441\u0438\u0433\u043d\u0430\u043b \u0434\u043e\u0432\u0435\u0440\u0438\u044f\" \u043f\u0440\u0438 \u0440\u0435\u0437\u043e\u043b\u0432\u0435 \u0442\u0438\u043f\u0430. \u042d\u0442\u043e \u0432 \u0441\u0432\u044f\u0437\u043a\u0435 \u0441 SSRF-\u043f\u0440\u0438\u043c\u0438\u0442\u0438\u0432\u043e\u043c \u0432\u043d\u0443\u0442\u0440\u0438 checkAutoType \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0432\u0441\u044e \u0437\u0430\u0449\u0438\u0442\u0443 \u0438 \u0434\u043e\u0431\u0440\u0430\u0442\u044c\u0441\u044f \u0434\u043e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043a\u043b\u0430\u0441\u0441\u0430 \u2192 RCE. \u0418\u0442\u043e\u0433: malformed HTTP-\u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430 \u043b\u044e\u0431\u043e\u0439 \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0439 JSON.parse, JSON.parseObject(String) \u0438\u043b\u0438 JSON.parseObject(String, Class) - \u0438 \u0441\u0435\u0440\u0432\u0435\u0440 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u0442\u0432\u043e\u0439 \u043a\u043e\u0434.\n\n \n\u0421\u0430\u043c\u043e\u0435 \u0441\u043e\u0447\u043d\u043e\u0435: \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0430\u0442\u0447\u0430 \u0434\u043b\u044f 1.x \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435\u0442. Alibaba \u043f\u0440\u043e\u0441\u0442\u043e \u0433\u043e\u0432\u043e\u0440\u0438\u0442 \"\u043c\u0438\u0433\u0440\u0438\u0440\u0443\u0439\u0442\u0435 \u043d\u0430 Fastjson2\" - \u0432\u0435\u0440\u0441\u0438\u044f 2.x \u043d\u0435 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u0430.\n\n \n\ud83c\udf0d \u041a\u0442\u043e \u0443\u0436\u0435 \u0441\u043b\u043e\u0432\u0438\u043b\nThreatBook \u0438 Imperva \u0444\u0438\u043a\u0441\u0438\u0440\u0443\u044e\u0442 \u0430\u043a\u0442\u0438\u0432\u043d\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0441 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u0436\u0435\u0440\u0442\u0432\u0430\u043c\u0438 \u0432 \u0444\u0438\u043d\u0442\u0435\u0445\u0435, \u0437\u0434\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u0438, \u0440\u0438\u0442\u0435\u0439\u043b\u0435, \u0431\u0438\u0437\u043d\u0435\u0441-\u0441\u0435\u043a\u0442\u043e\u0440\u0435 - \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u0432 \u0421\u0428\u0410, \u043f\u043b\u044e\u0441 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u0432 \u0421\u0438\u043d\u0433\u0430\u043f\u0443\u0440\u0435 \u0438 \u041a\u0430\u043d\u0430\u0434\u0435. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Imperva, \u043e\u043a\u043e\u043b\u043e 30% \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0438\u0434\u0451\u0442 \u0438\u0437 \u0442\u0443\u043b\u043e\u0432 \u043d\u0430 Ruby \u0438 Go, \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u043e\u0435 \u043c\u0430\u0441\u043a\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043e\u0431\u044b\u0447\u043d\u044b\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u044b. \u041e\u0436\u0438\u0434\u0430\u0435\u043c\u043e - \u0433\u0435\u043e\u0433\u0440\u0430\u0444\u0438\u044f \u0431\u0443\u0434\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u0440\u0430\u0441\u0448\u0438\u0440\u044f\u0442\u044c\u0441\u044f.\n\n \n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c, \u043f\u043e\u043a\u0430 \u043f\u0430\u0442\u0447\u0430 \u043d\u0435\u0442\n\n \n- \u041c\u0438\u0433\u0440\u0438\u0440\u0443\u0439 \u043d\u0430 Fastjson2 - \u0435\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0439 \u043f\u0443\u0442\u044c\n- \u0415\u0441\u043b\u0438 \u043c\u0438\u0433\u0440\u0430\u0446\u0438\u044f \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430 \u043f\u0440\u044f\u043c\u043e \u0441\u0435\u0439\u0447\u0430\u0441 - \u0432\u043a\u043b\u044e\u0447\u0438 SafeMode: -Dfastjson.parser.safeMode=true\n- \u0410\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u0430 - \u0441\u0431\u043e\u0440\u043a\u0430 com.alibaba:fastjson:1.2.83_noneautotype, \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0432\u044b\u0440\u0435\u0437\u0430\u043d \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 AutoType-\u043a\u043e\u0434\n- \u041d\u0430 \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440\u0435 - \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u0439 POST/JSON-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0441 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u0441\u0442\u0440\u043e\u043a\u0430\u043c\u0438 (@type, @JSONType) \u0447\u0435\u0440\u0435\u0437 WAF, \u043f\u043e\u043a\u0430 \u043d\u0435 \u043c\u0438\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u043b\n\n \n\u041c\u043e\u0440\u0430\u043b\u044c: \u0435\u0441\u043b\u0438 \u0442\u0432\u043e\u0439 Java-\u0441\u0442\u0435\u043a \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u0432\u0438\u0441\u0438\u0442 \u043d\u0430 Fastjson 1.x - \u0441\u0447\u0438\u0442\u0430\u0439, \u0447\u0442\u043e \u0442\u0432\u043e\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0443\u0436\u0435 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435, \u043f\u0440\u043e\u0441\u0442\u043e \u043f\u043e\u043a\u0430 \u043e\u0431 \u044d\u0442\u043e\u043c \u043d\u0435 \u0437\u043d\u0430\u0435\u0448\u044c \ud83d\ude0c \u0417\u0430\u0448\u0435\u0439 \u044d\u0442\u043e \u0432 \u043f\u0435\u043d\u0442\u0435\u0441\u0442-\u0447\u0435\u043a\u043b\u0438\u0441\u0442 \u043f\u0440\u044f\u043c\u043e \u0441\u0435\u0433\u043e\u0434\u043d\u044f.\n\n \n#Fastjson #RCE #CVE202616723 #JavaSecurity #SpringBoot #\u041a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #InfoSec #ZeroDay #\u041f\u0435\u043d\u0442\u0435\u0441\u0442 #WAF #\u0414\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f #AppSec #Alibaba #\u0411\u0435\u0437\u041e\u0434\u043d\u043e\u0433\u043e\u0414\u043d\u044f #SecOps", "url": "https://t.me/timcore_hacking/4971"}, {"timestamp": "2026-08-03T14:00:05.001Z", "date_only": false, "value": "2026-08-03T14:00:05.001512Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/96434", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "39976760-96cb-4067-beb0-9012201e1ee1", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Fastjson #\u6f0f\u6d1e #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a fastjson-check\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a xiaoqiMikko\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-03 13:02:01\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nFind fastjson in your JARs and Spring Boot fat-JARs, and check exposure to CVE-2026-16723. Zero dependencies, fully offline. \u4e00\u6761\u547d\u4ee4\u6392\u67e5 fastjson \u6f0f\u6d1e\u5f71\u54cd\u8303\u56f4\u3002\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/96434", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-03T16:00:05.228Z", "date_only": false, "value": "2026-08-03T16:00:05.228317Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/fRn9WLRC1KE6ry6fn3owOvcDc4IpJXFhnXNgjnu-Gc8v93I", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "170cd28a-dd45-4952-872c-ccee55cbd5a2", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-04T09:36:06.366Z", "date_only": false, "value": "2026-08-04T09:36:06.366000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://blog.securelayer7.net/cve-2026-16723-fastjson-1x-rce-analysis", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "c07fa24e-f133-4655-a0a8-746331f6c08a", "url": "https://blog.securelayer7.net/cve-2026-16723-fastjson-1x-rce-analysis", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-04T17:30:07.906Z", "date_only": false, "value": "2026-08-04T17:30:07.906190Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3msbk2s5n5d2p", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "d54a5c4d-631a-431e-ba97-e7e377813172", "content": "\ud83d\udce2 Exploitation active de CVE-2026-16723 dans Fastjson : RCE sans authentification\n\nSecurityWeek, publi\u00e9 le 28 juillet 2026. L'article rapporte l'exploitation active d'une vuln\u00e9rabilit\u00e9 critique dans Fastjson, une biblioth\u00e8que Java de\u2026\n\n\ud83d\udfe2 v\u00e9rification factuelle haute\n#Fastjson #RCE #Cyberveille", "url": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3msbk2s5n5d2p"}, {"timestamp": "2026-08-05T11:00:04.969Z", "date_only": false, "value": "2026-08-05T11:00:04.969884Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/96734", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "4e43a0ee-458d-46ee-b78d-c2d6ba5d9531", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Fastjson #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a fastjson-cve-2026-16723\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a learner330\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-05 09:44:01\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/96734", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-05T21:00:03.634Z", "date_only": false, "value": "2026-08-05T21:00:03.634055Z", "kind": "sighting", "label": "Seen", "source": "Telegram/UbZK-VwPh9l1pYbayMasyiZCPeV7grgX0EQqpt0r3m8Unos", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "d05b80f1-41fa-4daa-a607-973ea528f0ed"}, {"timestamp": "2026-08-06T00:00:09.990Z", "date_only": false, "value": "2026-08-06T00:00:09.990451Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/UbZK-VwPh9l1pYbayMasyiZCPeV7grgX0EQqpt0r3m8Unos", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "092b1ad3-8a96-48dd-93bd-5732839bbe98", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-06T07:00:04.058Z", "date_only": false, "value": "2026-08-06T07:00:04.058431Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/miFQN7X72jRRW6EY2gS7CQFdpGF0_8e-raRmF79rh9lBiw", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "c0dfe15f-3e2f-43d8-8f2a-0724f8dd6cdd", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-06T07:53:33.544Z", "date_only": false, "value": "2026-08-06T07:53:33.544623Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/belinski.dev/post/3msfkrk4aqc2m", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "6c43de08-e674-457d-bf08-fecdd5e9d039", "content": "A very easy to read article about discovery of CVE-2026-16723 (RCE in fastjson) and some details of how #Java Class Loaders and Resource Handling work.\n#cybersecurity\nfearsoff.org/research/fas...", "url": "https://bsky.app/profile/belinski.dev/post/3msfkrk4aqc2m"}, {"timestamp": "2026-08-07T18:18:20Z", "date_only": false, "value": "2026-08-07T18:18:20Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-CRF3-V9RR-V7HJ", "record": "GHSA-CRF3-V9RR-V7HJ", "field": "modified", "linked_record": true}, {"timestamp": "2026-08-20T03:00:03.271Z", "date_only": false, "value": "2026-08-20T03:00:03.271618Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/VqkK0eXOWhmRJZ90Bh3PqTJte1bxm7THA5YDoOUEdQFD0DQ", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "d718b600-2d0d-49cf-bfd2-15472e1205b3", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-20T03:00:03.665Z", "date_only": false, "value": "2026-08-20T03:00:03.665677Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/T_XByhyA_HALLjU76evu5RVvsn4zpzLoBf6fuRO_NOvcY2o", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "e9853d05-e85b-4f39-bc47-c7930e128e1f", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-21T09:00:04.713Z", "date_only": false, "value": "2026-08-21T09:00:04.713338Z", "kind": "sighting", "label": "Seen", "source": "Telegram/wffTTuVgQJ98JwhL42Ct7GiTcbOZOW8KxITp_kb-2yHdqmI", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "a3351120-1d3f-48ce-bf3f-ecd1ec035b4c"}, {"timestamp": "2026-08-21T23:00:07.337Z", "date_only": false, "value": "2026-08-21T23:00:07.337229Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pphm_HackerNews/2345", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "4885c556-1fb1-443c-8141-dbae36554ea9", "content": "\ud83d\udd34 Unpatched Fastjson Vulnerability Exploited in Attacks\n\nThreat actors have been exploiting a critical-severity remote code execution (RCE) vulnerability in Fastjson, security researchers warn.\n\nA popular JSON processing library for Java, Fastjson was developed by Alibaba for JSON serialization and deserialization.\n\nTracked as CVE-2026-16723 (CVSS score of 9), the unauthenticated bug impacts all deployments running as a Spring Boot executable fat-jar, which is the most widely used deployment model.", "url": "https://t.me/pphm_HackerNews/2345"}, {"timestamp": "2026-08-22T00:00:28.739Z", "date_only": false, "value": "2026-08-22T00:00:28.739260Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/wffTTuVgQJ98JwhL42Ct7GiTcbOZOW8KxITp_kb-2yHdqmI", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "880d4474-21be-49f5-b528-bd8acabbec48", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-22T19:00:06.250Z", "date_only": false, "value": "2026-08-22T19:00:06.250991Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/98724", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "ccc90d41-4d42-4b2b-aa9b-9294682d4595", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #\u5229\u7528\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-16723\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Superman-L\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-19 05:27:57\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nfastjson jsontype\u5229\u7528\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/98724"}, {"timestamp": "2026-08-23T00:00:11.662Z", "date_only": false, "value": "2026-08-23T00:00:11.662885Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/98724", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "fa7868c3-feb1-4042-a0eb-87f625f3a0bc", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #\u5229\u7528\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-16723\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Superman-L\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-19 05:27:57\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nfastjson jsontype\u5229\u7528\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/98724", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-24T20:09:04.459Z", "date_only": false, "value": "2026-08-24T20:09:04.459319Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mtu4bfqp2s23", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "b0753b1b-249c-4bdb-8420-74f31332f4f5", "content": "Java\u30c7\u30fc\u30bf\u5909\u63db\u30e9\u30a4\u30d6\u30e9\u30ea\u300cfastjson\u300d\u306b\u8106\u5f31\u6027 - \u60aa\u7528\u653b\u6483\u3082\u89b3\u6e2c\n\nJava\u30aa\u30d6\u30b8\u30a7\u30af\u30c8\u3068JSON\u30c7\u30fc\u30bf\u3092\u76f8\u4e92\u5909\u63db\u3059\u308b\u305f\u3081\u306e\u30aa\u30fc\u30d7\u30f3\u30bd\u30fc\u30b9\u30e9\u30a4\u30d6\u30e9\u30ea\u300cfastjson\u300d\u306b\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\n\n\u300c\u540c1.2.83\u300d\u304b\u3089\u300c\u540c1.2.68\u300d\u307e\u3067\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u306b\u3001\u4fe1\u983c\u3067\u304d\u306a\u3044\u30c7\u30fc\u30bf\u306e\u30c7\u30b7\u30ea\u30a2\u30e9\u30a4\u30ba\u306b\u8d77\u56e0\u3057\u3001\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u8a8d\u8a3c\u3092\u5fc5\u8981\u3068\u3059\u308b\u3053\u3068\u306a\u304f\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3055\u308c\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u8106\u5f31\u6027\u300cCVE-2026-16723\u300d\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3082\u306e\u3002\n\n\u540c\u30e9\u30a4\u30d6\u30e9\u30ea\u3092\u958b\u767a\u3059\u308b\u300cAlibaba\u300d\u3067\u306f\u3001Spring Boot\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u304c\u5b9f\u884c\u53ef\u80fd\u306a\u300cfat JAR\u300d\u3068\u3057\u3066\u30c7\u30d7\u30ed\u30a4\u3055\u308c\u3066\u3044\u308b\u5834\u5408\u306b\u5f71\u97ff\u304c...", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mtu4bfqp2s23"}, {"timestamp": "2026-08-26T23:55:58.921Z", "date_only": false, "value": "2026-08-26T23:55:58.921805Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mtzjuw67pc2j", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "7fb1d126-33b2-47f3-97b4-5ba1ae487ef2", "content": "\u30d1\u30c3\u30c1\u672a\u9069\u7528\u306eFastjson\u306e\u8106\u5f31\u6027\u304c\u653b\u6483\u306b\u60aa\u7528\u3055\u308c\u308b\n\nJava\u5411\u3051\u306e\u4eba\u6c17\u306eJSON\u51e6\u7406\u30e9\u30a4\u30d6\u30e9\u30ea\u3067\u3042\u308bFastjson\u306f\u3001JSON\u306e\u30b7\u30ea\u30a2\u30e9\u30a4\u30ba\u3068\u30c7\u30b7\u30ea\u30a2\u30e9\u30a4\u30ba\u306e\u305f\u3081\u306bAlibaba\u306b\u3088\u3063\u3066\u958b\u767a\u3055\u308c\u307e\u3057\u305f\u3002\n\nCVE-2026-16723\uff08CVSS\u30b9\u30b3\u30a29\uff09\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u3053\u306e\u8a8d\u8a3c\u4e0d\u8981\u306e\u30d0\u30b0\u306f\u3001\u6700\u3082\u5e83\u304f\u4f7f\u7528\u3055\u308c\u3066\u3044\u308b\u30c7\u30d7\u30ed\u30a4\u30e1\u30f3\u30c8\u30e2\u30c7\u30eb\u3067\u3042\u308b\u3001Spring Boot\u5b9f\u884c\u53ef\u80fd\u30d5\u30a1\u30a4\u30eb\u3067\u3042\u308bfat-jar\u3068\u3057\u3066\u5b9f\u884c\u3055\u308c\u308b\u3059\u3079\u3066\u306e\u30c7\u30d7\u30ed\u30a4\u30e1\u30f3\u30c8\u306b\u5f71\u97ff\u3092\u4e0e\u3048\u307e\u3059\u3002\n\n\u300c\u3053\u306e\u8106\u5f31\u6027\u306ffastjson\u306e\u6a19\u6e96\u30c7\u30d5\u30a9\u30eb\u30c8\u8a2d\u5b9a\u3067\u60aa\u7528\u53ef\u80fd\u3067\u3059\u3002AutoType\u306e\u6709\u52b9\u5316\u3084\u30af\u30e9\u30b9\u30d1\u30b9\u30ac\u30b8\u30a7\u30c3\u30c8\u306f\u5fc5\u8981\u3042...", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mtzjuw67pc2j"}, {"timestamp": "2026-08-28T14:00:05.437Z", "date_only": false, "value": "2026-08-28T14:00:05.437561Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/100075", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "1a6be00e-6575-4be0-ad89-43e768de8cee", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Fastjson #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a fastjson-cve\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ipisav\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-28 08:42:04\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nfastjson-cve-2026-16723\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/100075", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-03T03:00:05.108Z", "date_only": false, "value": "2026-09-03T03:00:05.108005Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/MalaysiaHacktivistz/24955", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "9e66f50c-9703-403b-9dbc-1fc6e2be7bd1", "content": "CVE-2026-16723 \u2014 Updated! \u2013 kitploit.com\n\nThu, 03 Sep 2026 06:54:16", "url": "https://t.me/MalaysiaHacktivistz/24955"}, {"timestamp": "2026-09-04T00:01:03.563Z", "date_only": false, "value": "2026-09-04T00:01:03.563310Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/MalaysiaHacktivistz/24955", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "2b50077f-dd68-4e1d-95f5-44fc11a86b09", "content": "CVE-2026-16723 \u2014 Updated! \u2013 kitploit.com\n\nThu, 03 Sep 2026 06:54:16", "url": "https://t.me/MalaysiaHacktivistz/24955", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-04T17:00:06.193Z", "date_only": false, "value": "2026-09-04T17:00:06.193498Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/MalaysiaHacktivistz/15573", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "0958ece2-372d-4af3-ae3b-5c774776ff8c", "content": "CVE-2026-16723 \u2014 Updated! \u2013 kitploit.com\n\nThu, 03 Sep 2026 06:54:16", "url": "https://t.me/MalaysiaHacktivistz/15573", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-06T14:00:06.209Z", "date_only": false, "value": "2026-09-06T14:00:06.209868Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/192732", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "861d75a0-6bef-4787-9bf0-0b39395f10c3", "content": "CVE-2026-16723 \u2014 Updated!\n\nA critical vulnerability affecting Fastjson versions 1.2.68 \u2013 1.2.83.\nRead more...", "url": "https://t.me/hacking_Attack/192732"}, {"timestamp": "2026-09-18T08:00:05.831Z", "date_only": false, "value": "2026-09-18T08:00:05.831811Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/VulnerabilityNews/43656", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "eee5317d-6e37-4203-8e72-559223226152", "content": "Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available\n\nSecurity firms ThreatBook and Imperva say attackers are targeting a critical flaw in Fastjson, Alibaba's JSON library for Java. In affected Spring Boot applications, a malicious JSON request can execute code without authentication, with the privileges of the Java process.\n\nTracked as CVE-2026-16723, the vulnerability carries an Alibaba-assigned CVSS score of 9.0. The confirmed chain requires\nhttps://thehackernews.com/2026/07/fastjson-1x-rce-vulnerability-targeted.html", "url": "https://t.me/VulnerabilityNews/43656", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-19T16:00:25Z", "date_only": false, "value": "2026-10-19T16:00:25.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/106040", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "96b6f2b3-d332-4aa5-a55a-014686bb5889", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a FastJson1.2.83-GenProbe2\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a cuttlefish520\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-19 15:41:08\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-16723 reproduction toolkit - fastjson 1.2.83 jar: remote class-loading payload generator (ASM-built POC.class with @JSONType + clinit exec)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/106040", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-19T16:00:25Z", "date_only": false, "value": "2026-10-19T16:00:25.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/106040", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "3056c4ee-019a-44a1-9448-07c1cf8d7d8f", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a FastJson1.2.83-GenProbe2\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a cuttlefish520\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-19 15:41:08\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-16723 reproduction toolkit - fastjson 1.2.83 jar: remote class-loading payload generator (ASM-built POC.class with @JSONType + clinit exec)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/106040"}, {"timestamp": "2026-10-19T19:00:17Z", "date_only": false, "value": "2026-10-19T19:00:17.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/9517HCA6eWn4msoK_vWskVvvoK9je-QDI6in8xCUc_aqVXU", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "248c95f2-709f-416b-acf5-a95e4712f87e", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-19T19:00:17Z", "date_only": false, "value": "2026-10-19T19:00:17.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/9517HCA6eWn4msoK_vWskVvvoK9je-QDI6in8xCUc_aqVXU", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "3a30a678-459f-4890-a20c-b111614ce20d"}, {"timestamp": "2026-10-20T03:00:06Z", "date_only": false, "value": "2026-10-20T03:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/D0priUgHaVaop7KnOkUL_l40sYlKGfQUn8CXjVvS3zRyI24", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "3442163d-0058-47a7-a42c-d4ed5d0b3d5f", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-20T03:00:06Z", "date_only": false, "value": "2026-10-20T03:00:06.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/D0priUgHaVaop7KnOkUL_l40sYlKGfQUn8CXjVvS3zRyI24", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "87c6d7f9-119c-4b80-b475-0ba638a4e03e"}, {"timestamp": "2026-10-23T16:00:52Z", "date_only": false, "value": "2026-10-23T16:00:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/106818", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "580ce03e-298e-4935-86e7-d2914b0c5520", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Fastjson #CVE #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a fastjson-CVE-2026-16723\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Ethen1212\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-23 15:11:07\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-16723 Fastjson 1.2.68-1.2.83 ???? RCE ?? (java.lang.Class whitelist bypass)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/106818", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-23T16:00:52Z", "date_only": false, "value": "2026-10-23T16:00:52.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/106818", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "1c0339bd-7a3d-4590-bbb1-73bf9f691482", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Fastjson #CVE #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a fastjson-CVE-2026-16723\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Ethen1212\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-23 15:11:07\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-16723 Fastjson 1.2.68-1.2.83 ???? RCE ?? (java.lang.Class whitelist bypass)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/106818"}, {"timestamp": "2026-10-23T19:00:14Z", "date_only": false, "value": "2026-10-23T19:00:14.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/09M8P-ATKSlPGbqO0lJ5J6NZLhwYeHPt1lLlaCFxnRb17MY", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "2e0a3100-3c78-4a3e-87d5-915da75340f3", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-23T19:00:14Z", "date_only": false, "value": "2026-10-23T19:00:14.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/09M8P-ATKSlPGbqO0lJ5J6NZLhwYeHPt1lLlaCFxnRb17MY", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "4d91aad8-bdc2-47d2-88c0-32622701adfa"}, {"timestamp": "2026-10-24T13:10:00.147Z", "date_only": false, "value": "2026-10-24T13:10:00.147", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-16723", "record": "FKIE_CVE-2026-16723", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-10-27T16:00:08Z", "date_only": false, "value": "2026-10-27T16:00:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/107600", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "03f112b6-22a8-4522-8836-5a31b66afd4f", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #\u6f0f\u6d1e\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-16723-vul\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a dichen-L\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-27 15:18:19\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-16723\u6f0f\u6d1e\u73af\u5883\u4e0epoc\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/107600", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-27T16:00:08Z", "date_only": false, "value": "2026-10-27T16:00:08.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/107600", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "3360af9b-a737-477e-a035-e36f3fe3457f", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #\u6f0f\u6d1e\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-16723-vul\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a dichen-L\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-27 15:18:19\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-16723\u6f0f\u6d1e\u73af\u5883\u4e0epoc\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/107600"}, {"timestamp": "2026-10-27T19:00:13Z", "date_only": false, "value": "2026-10-27T19:00:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/lsCscbh2J_cWXgSUBN0UL4q842QrOTzeAU2dRCgEkGEJbXU", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "e393dbf5-8484-47f0-a371-e2c7c1a5232d", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-27T19:00:13Z", "date_only": false, "value": "2026-10-27T19:00:13.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/lsCscbh2J_cWXgSUBN0UL4q842QrOTzeAU2dRCgEkGEJbXU", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "b349feaf-a374-4537-ae72-39287720b32d"}], "metrics": {"as_of": "2026-11-15T00:22:18.889Z", "anchors": {"origin": {"timestamp": "2026-07-23T08:26:24.453Z", "date_only": false, "value": "2026-07-23T08:26:24.453Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-16723", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-07-23T08:26:24.453Z", "date_only": false, "value": "2026-07-23T08:26:24.453Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-16723", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-07-26T00:00:28.302Z", "date_only": false, "value": "2026-07-26T00:00:28.302345Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/rReBw0Q4jMbZrY7xLybdVTPGa0Ybeq3C-HMv0PXt8kiNSpo", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "de443f7a-3dd5-4a53-845a-5cb08ba2e0e7", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2026-07-25T02:23:23Z", "date_only": false, "value": "2026-07-25T02:23:23+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2026-16723", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "ac903c11-aca3-458f-a80d-d45bf742c563", "status": {"status_reason": "confirmed", "exploited": true}}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 151018.547, "hours": 41.949596388888885, "days": 1.747899849537037, "min_seconds": 151018.547, "max_seconds": 151018.547, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-07-23T08:26:24.453Z", "date_only": false, "value": "2026-07-23T08:26:24.453Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-16723", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-07-25T02:23:23Z", "date_only": false, "value": "2026-07-25T02:23:23+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2026-16723", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "ac903c11-aca3-458f-a80d-d45bf742c563", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit": {"available": true, "seconds": 151018.547, "hours": 41.949596388888885, "days": 1.747899849537037, "min_seconds": 151018.547, "max_seconds": 151018.547, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-07-23T08:26:24.453Z", "date_only": false, "value": "2026-07-23T08:26:24.453Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-16723", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-07-25T02:23:23Z", "date_only": false, "value": "2026-07-25T02:23:23+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2026-16723", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "ac903c11-aca3-458f-a80d-d45bf742c563", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit_publication": {"available": true, "seconds": 228843.849, "hours": 63.56773583333333, "days": 2.648655659722222, "min_seconds": 228843.849, "max_seconds": 228843.849, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-07-23T08:26:24.453Z", "date_only": false, "value": "2026-07-23T08:26:24.453Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-16723", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-07-26T00:00:28.302Z", "date_only": false, "value": "2026-07-26T00:00:28.302345Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/rReBw0Q4jMbZrY7xLybdVTPGa0Ybeq3C-HMv0PXt8kiNSpo", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "de443f7a-3dd5-4a53-845a-5cb08ba2e0e7", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 9906954.436329, "hours": 2751.931787869167, "days": 114.6638244945486, "min_seconds": 9906954.436329, "max_seconds": 9906954.436329, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-07-23T08:26:24.453Z", "date_only": false, "value": "2026-07-23T08:26:24.453Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-16723", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-15T00:22:18.889Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 9755935.889329, "hours": 2709.982191480278, "days": 112.91592464501157, "min_seconds": 9755935.889329, "max_seconds": 9755935.889329, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-07-25T02:23:23Z", "date_only": false, "value": "2026-07-25T02:23:23+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2026-16723", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "ac903c11-aca3-458f-a80d-d45bf742c563", "status": {"status_reason": "confirmed", "exploited": true}}, "end": {"timestamp": "2026-11-15T00:22:18.889Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": true, "seconds": 9678110.587329, "hours": 2688.3640520358335, "days": 112.0151688348264, "min_seconds": 9678110.587329, "max_seconds": 9678110.587329, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-07-26T00:00:28.302Z", "date_only": false, "value": "2026-07-26T00:00:28.302345Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/rReBw0Q4jMbZrY7xLybdVTPGa0Ybeq3C-HMv0PXt8kiNSpo", "record": "CVE-2026-16723", "field": "creation_timestamp", "uuid": "de443f7a-3dd5-4a53-845a-5cb08ba2e0e7", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-15T00:22:18.889Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}