{"uuid": "eee5317d-6e37-4203-8e72-559223226152", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16723", "type": "exploited", "source": "https://t.me/VulnerabilityNews/43656", "content": "Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available\n\nSecurity firms ThreatBook and Imperva say attackers are targeting a critical flaw in Fastjson, Alibaba's JSON library for Java. In affected Spring Boot applications, a malicious JSON request can execute code without authentication, with the privileges of the Java process.\n\nTracked as CVE-2026-16723, the vulnerability carries an Alibaba-assigned CVSS score of 9.0. The confirmed chain requires\nhttps://thehackernews.com/2026/07/fastjson-1x-rce-vulnerability-targeted.html", "creation_timestamp": "2026-09-18T08:00:05.831811Z"}