CVE-2026-116580 is a deserialization vulnerability in the lxsmnsyc seroval library prior to version 1.6.8. The flaw allows an attacker to craft input that causes the deserializer to invoke plugin-produced values, potentially leading to confidentiality, integrity, or availability impacts depending on the plugin's behavior. This vulnerability is an incomplete-fix variant of a previous issue (CVE-2026-59940) and is resolved in version 1.6.8.
The Hugging Face LeRobot library versions 0.4.0 through 0.6.1 are vulnerable to arbitrary code execution due to unsafe dynamic class instantiation in the from_pretrained() method. This occurs when loading a policy's processor configuration from a repository, where the library uses the class field in JSON configuration to dynamically import and instantiate Python classes without proper validation.
vLLM is an inference and serving engine for large language models. Prior to 0.32.0, an authenticated caller can place forged shared-memory address and monotonic_id values in public multimodal features.kwargs_data. In scale-out deployments with shared-memory multimodal caching enabled, workers trust those values and pass attacker-selected bytes to pickle.loads(), allowing arbitrary Python execution even when insecure serialization is disabled. This issue is fixed in version 0.32.0.
CVE-2026-115190 is a high-severity deserialization vulnerability in Mautic's core affecting segment filters and custom field properties. It allows an attacker with write access to stored serialized data to instantiate arbitrary PHP objects during data processing, potentially leading to remote code execution and data compromise. The flaw exists because Mautic deserializes data without restricting PHP classes, bypassing safe deserialization helpers. Fixed versions are 5.2.12, 6.0.10, and 7.2.0.
The Prime Mover – Backup and Migration WordPress plugin (up to version 2.2.1) is vulnerable to PHP Object Injection via unsafe deserialization of untrusted data stored in comment content. An unauthenticated attacker can submit a crafted base64-encoded serialized object through the comment submission endpoint. When an administrator runs a migration export or restore, the plugin unserializes this data without class restrictions, enabling exploitation through a gadget chain in the plugin's bundled Freemius library. This vulnerability allows remote code execution with no user interaction required.
baserCMS versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2 contain a deserialization vulnerability in the widget-area entity. This flaw allows an administrator or an attacker with widget-write capability to store malicious serialized objects via the admin JSON API. These objects are deserialized without restrictions, enabling remote code execution as the web-server user upon unauthenticated page requests. The issue has been fixed in versions 5.3.2 and 5.4.2.
CGM CLININET contains a critical vulnerability (CVE-2025-30047) involving deserialization of untrusted data in its HTTP-based administrative API. An attacker on the same local network can send crafted serialized Java objects to this API, leading to remote code execution with root privileges. This flaw is fixed in version 2026.MS3.
Pylint versions from 0.15.2 up to but not including 4.0.9 have a deserialization vulnerability where module statistics are stored in predictable cache files and loaded using pickle.load. An attacker with write access to a shared or group-writable cache directory can replace these cache files with malicious serialized data, leading to arbitrary code execution with the privileges of the user running Pylint. This issue is fixed in version 4.0.9.
CVE-2026-16477 is a high-severity vulnerability in CleanShot X for macOS where the application insecurely deserializes untrusted data embedded in .cleanshot project files. An attacker can craft a malicious .cleanshot file that, when opened by a user, triggers automatic execution of arbitrary code with the current user's privileges. This issue affects versions prior to 4.5.2, 4.6.3, 4.7.8, and 4.8.10, which contain the fixes.
CVE-2026-114724 is a high-severity vulnerability in Roundcube Webmail before versions 1.6.20 and 1.7.5. It involves an object injection primitive in the rcube_session::unserialize() function, where session keys prefixed with “!” were mishandled, causing desynchronization of serialized session data. This flaw allows an attacker who can influence stored session data to perform PHP object injection. The issue was fixed by rejecting such “!”-prefixed session keys in the affected function.
The pfSense REST API package is an unofficial, open-source REST and GraphQL API for pfSense CE and pfSense Plus firewalls. A privilege escalation vulnerability in pfSense-pkg-RESTAPI prior to version 2.9.0 allows authenticated accounts holding the dedicated settings sync permission to modify REST API configuration secrets. This enables a non-administrative user to elevate their privileges to a full administrator. pfSense-pkg-RESTAPI 2.9.0 patches the issue. Access to the HA settings sync endpoint now strictly requires full administrative privileges (`page-all`). The sub-administrative sync privilege has been removed in versions v2.9.0 and later. In addition to correcting the access control boundary, version 2.9.0 includes the following hardening measures: opt-in default and format and validation modernization. As a workaround, one may mitigate exposure by taking either or all of the following steps. Revoke Scoped Permissions: Remove the `api-v2-system-restapi-settings-sync-post` privilege from all non-administrative users. Apply ACLs: Configure REST API Access Control Lists (ACLs) and/or firewall rules to restrict access to API endpoints exclusively to trusted administrator and HA peer IP addresses.
The Duplicator and Duplicator Pro WordPress plugins are vulnerable to PHP Object Injection via deserialization of untrusted data in versions up to 1.5.17 and 4.6.10 respectively. This flaw allows unauthenticated attackers to inject serialized objects into public site content, which are later processed during migration or import operations by an administrator. Exploitation can lead to remote code execution or deletion of critical files such as wp-config.php, potentially resulting in site takeover. The vulnerability requires a sequence of actions: an attacker stores malicious serialized data, an administrator creates a package, and then performs a migration or import that triggers the deserialization. No official patch information is provided in the data.
Mandiant FLARE floss versions prior to 3.2.0 contain a deserialization vulnerability (CWE-502) that allows arbitrary code execution when processing crafted .viv or .exe.viv workspace files. This vulnerability is fixed in version 3.2.0. The flaw requires local access and user interaction, with high attack complexity and privileges not required. The CVSS 4.0 score is 8.7, indicating a high severity risk.
Mandiant FLARE capa versions prior to 10.0.0 contain a deserialization vulnerability (CWE-502) that allows arbitrary code execution when processing crafted .viv or .exe.viv workspace files. This vulnerability is fixed in version 10.0.0.
WebITR developed by Uniong has a Insecure Deserialization vulnerability. Authenticated remote attackers can use the hard-coded cryptographic key to craft and submit malicious serialized data, thereby executing arbitrary code on the server.
CVE-2026-12148 is a high-severity vulnerability in IBM MQ Operator caused by unrestricted Java deserialization in the MQ Classes for Java. This flaw allows an authenticated attacker to cause denial of service or potentially execute arbitrary code. The vulnerability affects multiple versions of IBM MQ Operator prior to version 3.4.0, which contains the fix. The CVSS 3.1 base score is 7.5, indicating significant impact on confidentiality, integrity, and availability.
CVE-2026-12155 is a vulnerability in IBM MQ Operator where an authenticated attacker can cause a denial of service by sending specially crafted multicast status messages that trigger a NULL pointer dereference. This flaw affects multiple versions of IBM MQ Operator prior to version 3.4.0, where it has been fixed. The vulnerability does not impact confidentiality or integrity but can disrupt availability.
CVE-2026-12350 is a vulnerability in IBM MQ Operator where an authenticated attacker can cause a denial of service by sending a specially crafted asynchronous consume request that crashes the queue manager agent process. The vulnerability is related to deserialization of untrusted data (CWE-502). It affects multiple versions of IBM MQ Operator. The CVSS v3.1 base score is 6.5, indicating a medium severity. There is no information about available patches or vendor advisories specifying remediation.
CVE-2026-88900 is a deserialization of untrusted data vulnerability in the Apache Camel Camel-Jgroups component affecting versions from 4.0.0 before 4.18.5 and from 4.19.0 before 4.22.1. The vulnerability arises because the JGroupsEndpoint.createExchange method deserializes incoming messages without applying any serialization filters, allowing an attacker with network access to the cluster's multicast group or bind port to send crafted serialized objects. This can lead to remote code execution if a suitable deserialization gadget chain is present on the classpath. The issue is fixed in Apache Camel versions 4.18.5 and 4.22.1.
CVE-2026-78165 is a deserialization of untrusted data vulnerability in the Apache Camel Spring Redis component affecting versions from 2.11.0 before 4.18.5 and from 4.19.0 before 4.22.1. The vulnerability arises because the component uses a default Java serialization mechanism without applying any object input filtering, allowing arbitrary serialized objects to be deserialized and their readObject methods executed. This occurs before any route logic can inspect the message, exposing the system to potential remote code execution if an attacker can publish messages to subscribed Redis channels. The issue is fixed in Apache Camel versions 4.18.5, 4.22.1, and later 4.23.0. Mitigations include upgrading to fixed versions, setting JVM-wide serialization filters, configuring non-Java serializers, and restricting Redis access.