Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Tag: cwe-502 Clear

ID	Title	Severity	Tags	Detected
CVE-2026-14512	Unsafe Deserialization in c (CVE-2026-14512) vulnerability in c (CVE-2026-14512). Successful exploitation can lead to full system takeover.	Critical	C Insecure Deserialization Cwe 502 Ibm +1	1 month ago
CVE-2026-66713	Unsafe Deserialization in apache (CVE-2026-66713) vulnerability in apache (CVE-2026-66713). Successful exploitation can lead to full system takeover.	Critical	Java Apache Tomcat Insecure Deserialization +2	1 month ago
CVE-2026-11756	Unsafe Deserialization in deserialization (CVE-2026-11756) vulnerability in deserialization (CVE-2026-11756). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Insecure Deserialization Cwe 502	1 month ago
CVE-2026-65617	Unsafe Deserialization in deserialization (CVE-2026-65617) vulnerability in deserialization (CVE-2026-65617). Successful exploitation can lead to full system takeover.	High	Insecure Deserialization Cwe 502 Jfrog Artifactory	1 month ago
CVE-2026-63077 KEV	[KEV] Unsafe Deserialization in Jetbrains teamcity (CVE-2026-63077) vulnerability in Jetbrains teamcity (CVE-2026-63077). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Remote Code Execution Cwe 502 Jetbrains Teamcity	1 month ago
CVE-2026-15962	Unsafe Deserialization in wordpress (CVE-2026-15962) vulnerability in wordpress (CVE-2026-15962). Successful exploitation can lead to full system takeover.	High	PHP WordPress Insecure Deserialization Cwe 502	1 month ago
CVE-2026-59940	Unsafe Deserialization in seroval (CVE-2026-59940) vulnerability in seroval (CVE-2026-59940). Successful exploitation can lead to full system takeover. Exploitable via ``seroval``. Mitigation: upgrade to `1.5.3` or later.	Critical	JavaScript Remote Code Execution Insecure Deserialization Cwe 502 +1	1 month ago
CVE-2026-50517	Unsafe Deserialization in deserialization (CVE-2026-50517) vulnerability in deserialization (CVE-2026-50517). Successful exploitation can lead to full system takeover.	Critical	Insecure Deserialization Cwe 502 Microsoft 365 Copilot	1 month ago
CVE-2026-21655	Unsafe Deserialization in deserialization (CVE-2026-21655) vulnerability in deserialization (CVE-2026-21655). Risk of unauthorized operations or information disclosure.		Insecure Deserialization Cwe 502	1 month ago
CVE-2026-65497	Administrator PHP Object Injection in Complianz <= 7.5.0 versions. Administrator PHP Object Injection in Complianz <= 7.5.0 versions.	High	PHP Cwe 502	1 month ago
CVE-2026-65493	Subscriber PHP Object Injection in Dokan Pro <= 5.0.2 versions. Subscriber PHP Object Injection in Dokan Pro <= 5.0.2 versions.	High	PHP Cwe 502	1 month ago
CVE-2026-59544	Unauthenticated PHP Object Injection in Thrive Quiz Builder <= 10.9.3.0 versions. Unauthenticated PHP Object Injection in Thrive Quiz Builder <= 10.9.3.0 versions.	Critical	PHP Cwe 502	1 month ago
CVE-2026-16723	Vulnerability in com.alibaba:fastjson (CVE-2026-16723) vulnerability in com.alibaba:fastjson (CVE-2026-16723). Successful exploitation can lead to full system takeover.	Critical	Remote Code Execution Cwe 20 Cwe 502	1 month ago
CVE-2026-61246	Privilege Escalation in c (CVE-2026-61246) vulnerability in c (CVE-2026-61246). Successful exploitation can lead to full system takeover.	High	Java C Cwe 269 Cwe 306 +3	1 month ago
CVE-2026-60439	Privilege Escalation in c (CVE-2026-60439) vulnerability in c (CVE-2026-60439). Successful exploitation can lead to full system takeover.	High	Java C Cwe 269 Cwe 306 +3	1 month ago
CVE-2026-60373	Privilege Escalation in c (CVE-2026-60373) vulnerability in c (CVE-2026-60373). Successful exploitation can lead to full system takeover.	High	Java C Cwe 269 Cwe 306 +3	1 month ago
CVE-2026-60372	Privilege Escalation in c (CVE-2026-60372) vulnerability in c (CVE-2026-60372). Successful exploitation can lead to full system takeover.	Critical	Java C Cwe 269 Cwe 284 +4	1 month ago
CVE-2026-60369	Privilege Escalation in c (CVE-2026-60369) vulnerability in c (CVE-2026-60369). Successful exploitation can lead to full system takeover.	Critical	Java C Cwe 269 Cwe 284 +3	1 month ago
CVE-2026-60367	Privilege Escalation in c (CVE-2026-60367) vulnerability in c (CVE-2026-60367). Successful exploitation can lead to full system takeover.	Critical	Java C Cwe 269 Cwe 287 +4	1 month ago
CVE-2026-60366	Privilege Escalation in c (CVE-2026-60366) vulnerability in c (CVE-2026-60366). Successful exploitation can lead to full system takeover.	Critical	Java C Cwe 269 Cwe 284 +4	1 month ago
CVE-2026-13190	Unsafe Deserialization in deserialization (CVE-2026-13190) vulnerability in deserialization (CVE-2026-13190). Successful exploitation can lead to full system takeover.	High	Remote Code Execution Insecure Deserialization Cwe 502 Progress +1	1 month ago
CVE-2026-13185	Unsafe Deserialization in progress (CVE-2026-13185) vulnerability in progress (CVE-2026-13185). Successful exploitation can lead to full system takeover.	High	Remote Code Execution Cwe 502 Progress Telerik Ui For Aspnet Ajax	1 month ago
CVE-2026-47058	Unsafe Deserialization in c (CVE-2026-47058) vulnerability in c (CVE-2026-47058). Confidential information can be exposed externally.	High	Java C Cwe 502 Oracle +2	1 month ago
CVE-2026-24232	Unsafe Deserialization in deserialization (CVE-2026-24232) vulnerability in deserialization (CVE-2026-24232). Risk of unauthorized operations or information disclosure.	Medium	Insecure Deserialization Cwe 502	1 month ago
CVE-2026-64606	Unsafe Deserialization in apache (CVE-2026-64606) vulnerability in apache (CVE-2026-64606). Successful exploitation can lead to full system takeover.	Critical	Java Apache Insecure Deserialization Cwe 502 +1	1 month ago
CVE-2026-64608	Unsafe Deserialization in c (CVE-2026-64608) vulnerability in c (CVE-2026-64608). Successful exploitation can lead to full system takeover.	Critical	C Apache Cwe 502 Cwe 787 +2	1 month ago
CVE-2026-63767	Unsafe Deserialization in deserialization (CVE-2026-63767) vulnerability in deserialization (CVE-2026-63767). Successful exploitation can lead to full system takeover.	Critical	Insecure Deserialization Cwe 502	1 month ago
CVE-2026-28220	Unsafe Deserialization in wazuh (CVE-2026-28220) vulnerability in wazuh (CVE-2026-28220). Successful exploitation can lead to full system takeover. Exploitable via ``ALLOWED_CALLABLES_PACKAGES``.	High	Cwe 502 Wazuh	1 month ago
CVE-2026-12484	Keras: TorchModuleWrapper can deserialize unsafe PyTorch pickle data Keras: TorchModuleWrapper can deserialize unsafe PyTorch pickle data	High	Insecure Deserialization Cwe 502 Keras Python +2	1 month ago
CVE-2026-8476	Unsafe Deserialization in langflow (CVE-2026-8476) vulnerability in langflow (CVE-2026-8476). Successful exploitation can lead to full system takeover.	Critical	Python Remote Code Execution Cwe 502 Langflow +6	1 month ago
CVE-2026-14890	Unsafe Deserialization in deserialization (CVE-2026-14890) vulnerability in deserialization (CVE-2026-14890). Confidential information can be exposed externally.	Critical	Remote Code Execution Insecure Deserialization Cwe 502 Lmsys +1	1 month ago
CVE-2026-15008	Unsafe Deserialization in wordpress (CVE-2026-15008) vulnerability in wordpress (CVE-2026-15008). Successful exploitation can lead to full system takeover.	High	PHP WordPress Remote Code Execution Cwe 502	1 month ago
CVE-2026-24233	Unsafe Deserialization in deserialization (CVE-2026-24233) vulnerability in deserialization (CVE-2026-24233). Successful exploitation can lead to full system takeover.	High	Insecure Deserialization Cwe 502	1 month ago
CVE-2026-24220	Unsafe Deserialization in deserialization (CVE-2026-24220) vulnerability in deserialization (CVE-2026-24220). Successful exploitation can lead to full system takeover.	Medium	Insecure Deserialization Cwe 502	1 month ago
CVE-2026-47472	Unsafe Deserialization in dos (CVE-2026-47472) vulnerability in dos (CVE-2026-47472). Successful exploitation can lead to full system takeover.	High	Denial of Service Insecure Deserialization Cwe 502	1 month ago
CVE-2026-24227	Unsafe Deserialization in deserialization (CVE-2026-24227) vulnerability in deserialization (CVE-2026-24227). Risk of unauthorized operations or information disclosure.	Medium	Insecure Deserialization Cwe 502 Nvidia Tensorrt	1 month ago
CVE-2026-50649	Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally. Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally.	High	C# Insecure Deserialization Cwe 502 Microsoft +16	1 month ago
CVE-2026-50646	Unsafe Deserialization in csharp (CVE-2026-50646) vulnerability in csharp (CVE-2026-50646). Successful exploitation can lead to full system takeover.	High	C# Cwe 502 Cwe 693 Microsoft +17	1 month ago
CVE-2026-50509	Unsafe Deserialization in deserialization (CVE-2026-50509) vulnerability in deserialization (CVE-2026-50509). Successful exploitation can lead to full system takeover.	High	Insecure Deserialization Cwe 502 Microsoft Windows 10 1607 +9	1 month ago
CVE-2026-55944	Unsafe Deserialization in deserialization (CVE-2026-55944) vulnerability in deserialization (CVE-2026-55944). Successful exploitation can lead to full system takeover.	Critical	Insecure Deserialization Cwe 502 Microsoft Dynamics Nav	1 month ago
CVE-2026-58644 KEV	[KEV] Unsafe Deserialization in Microsoft deserialization (CVE-2026-58644) vulnerability in Microsoft deserialization (CVE-2026-58644). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Insecure Deserialization Cwe 502 Microsoft Sharepoint Server	1 month ago
CVE-2026-55009	Unsafe Deserialization in deserialization (CVE-2026-55009) vulnerability in deserialization (CVE-2026-55009). Successful exploitation can lead to full system takeover.	High	Insecure Deserialization Cwe 502 Microsoft Exchange Server +1	1 month ago
CVE-2026-54118	Unsafe Deserialization in deserialization (CVE-2026-54118) vulnerability in deserialization (CVE-2026-54118). Successful exploitation can lead to full system takeover.	Critical	Insecure Deserialization Cwe 502 Microsoft Sql Server 2016 +4	1 month ago
CVE-2026-54117	Unsafe Deserialization in deserialization (CVE-2026-54117) vulnerability in deserialization (CVE-2026-54117). Successful exploitation can lead to full system takeover.	Critical	Insecure Deserialization Cwe 502 Microsoft Sql Server 2016 +4	1 month ago
CVE-2026-50652	Unsafe Deserialization in deserialization (CVE-2026-50652) vulnerability in deserialization (CVE-2026-50652). Risk of unauthorized operations or information disclosure.	High	Insecure Deserialization Cwe 502 Microsoft Net Framework +13	1 month ago
CVE-2026-50522 KEV	[KEV] Unsafe Deserialization in Microsoft deserialization (CVE-2026-50522) vulnerability in Microsoft deserialization (CVE-2026-50522). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	Critical	Insecure Deserialization Cwe 502 Microsoft Sharepoint Server	1 month ago
CVE-2026-12583	Unsafe Deserialization in wordpress (CVE-2026-12583) vulnerability in wordpress (CVE-2026-12583). Successful exploitation can lead to full system takeover.	High	PHP WordPress Insecure Deserialization Cwe 502	1 month ago
CVE-2026-58233	Unsafe Deserialization in deserialization (CVE-2026-58233) vulnerability in deserialization (CVE-2026-58233). Confidential information can be exposed externally.	High	Remote Code Execution Insecure Deserialization Cwe 502	1 month ago
CVE-2026-59521	Unsafe Deserialization in deserialization (CVE-2026-59521) vulnerability in deserialization (CVE-2026-59521). Successful exploitation can lead to full system takeover.	High	Insecure Deserialization Cwe 502	1 month ago
CVE-2026-59518	Unsafe Deserialization in deserialization (CVE-2026-59518) vulnerability in deserialization (CVE-2026-59518). Successful exploitation can lead to full system takeover.	Critical	Insecure Deserialization Cwe 502	1 month ago

Vulnerabilities

🍪 About cookies