Arista patches VeloCloud Orchestrator zero-day exploited in attacks Source: BleepingComputer Arista has patched a maximum-severity command injection vulnerability in on-premises VeloCloud Orchestrator deployments that is being actively exploited in attacks. […] Read original
Arista patches VeloCloud Orchestrator zero-day exploited in attacks Source: BleepingComputer Arista has patched a maximum-severity command injection vulnerability in on-premises VeloCloud Orchestrator deployments that is being actively exploited in attacks. […] Read original
Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available Source: The Hacker News Security firms ThreatBook and Imperva say attackers are targeting a critical flaw in Fastjson, Alibaba’s JSON library for Java. In affected Spring Boot applications, a malicious JSON request can execute code without authentication, with the privileges of the Java process. Tracked as CVE-2026-16723, Read original
Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available Source: The Hacker News Security firms ThreatBook and Imperva say attackers are targeting a critical flaw in Fastjson, Alibaba’s JSON library for Java. In affected Spring Boot applications, a malicious JSON request can execute code without authentication, with the privileges of the Java process. Tracked as CVE-2026-16723, Read original
Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available Source: The Hacker News Security firms ThreatBook and Imperva say attackers are targeting a critical flaw in Fastjson, Alibaba’s JSON library for Java. In affected Spring Boot applications, a malicious JSON request can execute code without authentication, with the privileges of the Java process. Tracked as CVE-2026-16723, Read original
Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available Source: The Hacker News Security firms ThreatBook and Imperva say attackers are targeting a critical flaw in Fastjson, Alibaba’s JSON library for Java. In affected Spring Boot applications, a malicious JSON request can execute code without authentication, with the privileges of the Java process. Tracked as CVE-2026-16723, Read original
Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available Source: The Hacker News Security firms ThreatBook and Imperva say attackers are targeting a critical flaw in Fastjson, Alibaba’s JSON library for Java. In affected Spring Boot applications, a malicious JSON request can execute code without authentication, with the privileges of the Java process. Tracked as CVE-2026-16723, Read original
Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available Source: The Hacker News Security firms ThreatBook and Imperva say attackers are targeting a critical flaw in Fastjson, Alibaba’s JSON library for Java. In affected Spring Boot applications, a malicious JSON request can execute code without authentication, with the privileges of the Java process. Tracked as CVE-2026-16723, Read original
Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git Source: The Hacker News Security researchers at depthfirst published working exploit code on July 24 for a GitLab flaw that GitLab patched six weeks earlier, on June 10. It runs commands as git on any self-managed 18.11.3 server that has not taken the update. Any authenticated user who can push to a project can run i Read original
Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git Source: The Hacker News Security researchers at depthfirst published working exploit code on July 24 for a GitLab flaw that GitLab patched six weeks earlier, on June 10. It runs commands as git on any self-managed 18.11.3 server that has not taken the update. Any authenticated user who can push to a project can run i Read original