{"uuid": "0de0e697-04dc-4e72-9575-a9c14dd04855", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16723", "type": "exploited", "source": "https://t.me/VulnerabilityNews/43656", "content": "Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available\n\nSecurity firms ThreatBook and Imperva say attackers are targeting a critical flaw in Fastjson, Alibaba's JSON library for Java. In affected Spring Boot applications, a malicious JSON request can execute code without authentication, with the privileges of the Java process.\n\nTracked as CVE-2026-16723, the vulnerability carries an Alibaba-assigned CVSS score of 9.0. The confirmed chain requires\nhttps://thehackernews.com/2026/07/fastjson-1x-rce-vulnerability-targeted.html", "creation_timestamp": "2026-09-19T00:00:43.338993Z"}