Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available
Affected vendors and products
More on Available
Other advisories
- HighCVE-2026-70379When the vSolution Matrix feature is enabled, affected devices may make current screen content available through an unauthenticated RTSP/RTP stream to hosts …
- Not ratedCVE-2026-93135bpf: Reject programs with inlined helpers if JIT is not available
- Highosv:MAL-2026-17992Malicious code in do-wnload-available-2016-44937-in-the-magic-hour-xgzaj-txvlft (npm)
- Highosv:MAL-2026-17997Malicious code in do-wnload-available-provincial-q7d0i-muzxoj (npm)
- Highosv:MAL-2026-17994Malicious code in do-wnload-available-61075-you-think-you-really-know-me-1-c368u-jspcon (npm)
- Highosv:MAL-2026-18007Malicious code in down-load-available-zip-now-42301-gloria-tp7wn-dcxkwl (npm)
- Highosv:MAL-2026-17993Malicious code in do-wnload-available-20999-ruff-ryders-first-lady-6wp8i-xhznkl (npm)
- Highosv:MAL-2026-18005Malicious code in down-load-available-zip-now-12673-dirt-farmer-jn0vw-rkwppg (npm)
Other news entries
- When prevention fails: Why cyber resilience is the next big test of trustNewsCSO Online
- PHP2Shell puts dozens of UK government services out of serviceNewsThe Register — Security
- Critical PHP Vulnerability (CVE-2026-109618, CVE-2026-109619) [infocon yellow], (Wed, Oct 21st)NewsSANS ISC Diary
- State Bank of India Confirms Data Leak After 3,897 Customer Records Found on Dark WebNewsThe Hacker News
- ConnectWise Suspends Cloud Services in Response to CyberattackNewsSecurityWeek
- Cisco warns of actively exploited Secure Email Gateway flawNewsCSO Online
- Palo Alto Networks Patches PAN-OS Zero-Day Exploited for Remote Code ExecutionNewsSecurityWeek
- Watch Now: Zero Trust Strategies Summit – All Sessions Available on DemandEventSecurityWeek
Source: https://thehackernews.com/2026/07/fastjson-1x-rce-vulnerability-targeted.html
ID