{"uuid": "4885c556-1fb1-443c-8141-dbae36554ea9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16723", "type": "seen", "source": "https://t.me/pphm_HackerNews/2345", "content": "\ud83d\udd34 Unpatched Fastjson Vulnerability Exploited in Attacks\n\nThreat actors have been exploiting a critical-severity remote code execution (RCE) vulnerability in Fastjson, security researchers warn.\n\nA popular JSON processing library for Java, Fastjson was developed by Alibaba for JSON serialization and deserialization.\n\nTracked as CVE-2026-16723 (CVSS score of 9), the unauthenticated bug impacts all deployments running as a Spring Boot executable fat-jar, which is the most widely used deployment model.", "creation_timestamp": "2026-08-21T23:00:07.337229Z"}