CVE-2026-24216 is a high-severity vulnerability in the NVIDIA BioNeMo Framework for Linux involving deserialization of untrusted data. Exploitation could allow an attacker to execute code, cause denial of service, disclose information, or tamper with data. The vulnerability requires local access with low complexity and user interaction. No official patch or remediation guidance has been provided yet.
NVIDIA TRT-LLM for any platform contains a vulnerability in RPC testing, where an attacker could cause an unsafe deserialization. A successful exploit of this vulnerability might lead to code execution, denial of service, data tampering, and information disclosure.
NVIDIA TRT-LLM for any platform contains a deserialization vulnerability and unsafe serialized handle. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.
NVIDIA TRT-LLM for any platform contains a vulnerability in MPI server, where an attacker could cause an unsafe deserialization. A successful exploit of this vulnerability might lead to code execution, denial of service, data tampering, and information disclosure.
The Boost plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 2.0.3 via deserialization of untrusted input in the STYXKEY-BOOST_USER_LOCATION cookie. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present.
CVE-2026-6009 is a high-severity vulnerability in the Jaspersoft JasperReports Library Community Edition caused by deserialization of untrusted data. This Java deserialization flaw can allow remote code execution without user interaction. The vulnerability has a CVSS 4.0 base score of 8.7, indicating a high impact with a network attack vector. No official patch or remediation guidance is currently available from the vendor. There are no known exploits in the wild at this time.
A critical deserialization vulnerability exists in the TYPO3 extension "Content Element Selector". The extension unsafely passes an attacker-controlled cookie directly to PHP's unserialize() function. This allows a remote, unauthenticated attacker to supply a crafted serialized payload that can trigger PHP Object Injection and potentially achieve Remote Code Execution on the TYPO3 server. Exploitation requires the plugin to be configured with "Persistent Mode: Static."
A deserialization vulnerability exists in the TYPO3 Site Crawler extension where the X-T3Crawler-Meta response header is passed directly to PHP's unserialize() function. This allows an attacker who controls a crawled endpoint to inject arbitrary serialized PHP objects, potentially leading to remote code execution on the TYPO3 server. Exploitation requires administrative privileges to configure a crawler-enabled page and to trigger the crawl via a Scheduler task. The vulnerability affects version 12.0.0 and version 0 of the extension. No official patch or remediation guidance is currently available.
AutoGPT versions 0.6.34 through 0.6.51 contain a deserialization vulnerability where Redis cache data is deserialized using pickle.loads without integrity or authenticity checks. This allows an attacker who can poison a shared Redis cache key to execute arbitrary commands in the backend container, impacting confidentiality, integrity, and availability. The issue is fixed in version 0.6.52.
FreePBX is an open source IP PBX. In versions below 16.0.71 and 17.0.6, the backup module does not properly sanitize data during restore operations, potentially leading to compromise if the backup contains carefully crafted hostile data. During backup restore operations, FreePBX extracts selected files from a user-supplied tar archive. If a malicious file exists in the archive, it is read and passed directly to unserialize() without validation, class restrictions, or integrity checks. This issue allows Remote Code Execution during restoration of the backup as the web server user (typically asterisk or www-data). The attack does not require shell access, CLI access, or filesystem write permissions beyond the normal restore workflow. Authentication with a known username that has sufficient access permissions and/or write access to backup files is required. This issue has been fixed in versions 16.0.71 and 17.0.6.
A security flaw has been discovered in h2oai h2o-3 up to 7402. This affects the function importBinaryModel of the file h2o-core/src/main/java/hex/Model.java of the component JAR Handler. Performing a manipulation results in deserialization. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2026-8612 affects WWW::Mechanize::Cached versions before 2.00 for Perl, where cached HTTP responses are stored in a world-writable directory with insecure permissions. This allows a local attacker with write access to the cache directory to replace cached responses with attacker-controlled data. When the victim process retrieves the cached response, it deserializes the data using Storable::thaw, potentially triggering arbitrary code execution if certain Perl classes with side-effectful hooks are loaded. The vulnerability arises from incorrect permission assignment (CWE-732) and unsafe deserialization (CWE-502).
DataHub is an open-source metadata platform. Prior to 1.5.0.3, The DataHub frontend (datahub-frontend-react) deserializes attacker-controlled Java objects from the REDIRECT_URL HTTP cookie during the OIDC callback flow, with no integrity protection (no HMAC, no encryption). This is a Deserialization of Untrusted Data vulnerability (CWE-502) affecting the GET /callback/oidc endpoint. Successful exploitation requires a valid user account in the configured OIDC identity provider This vulnerability is fixed in 1.5.0.3.
CVE-2026-41957 is a high-severity vulnerability in F5 BIG-IP and BIG-IQ Configuration utility that allows authenticated users to execute remote code via deserialization of untrusted data. It affects specific versions including 17.5.0, 17.1.0, and 16.1.0. The vulnerability does not require user interaction and has a high impact on confidentiality, integrity, and availability. No official patch or remediation guidance is currently provided by the vendor.
The coreActivity: Activity Logging for WordPress plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.0. This is due to the plugin failing to validate or strip PHP serialization syntax from the User-Agent HTTP header before storing it in the logmeta table, and subsequently calling `maybe_unserialize()` on every retrieved `meta_value` in `query_metas()` without verifying the data was originally serialized by the application. This makes it possible for unauthenticated attackers to inject a crafted PHP serialized payload via the User-Agent header during any logged event (such as a failed login attempt), which, when an administrator views the Logs page, is deserialized and passed to `DeviceDetector::setUserAgent()`, triggering a Fatal TypeError that creates a persistent Denial of Service condition blocking administrator access to the Logs page entirely.
Adobe Connect versions 2025.9.15, 2025.8.157 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page. Scope is changed.