importantSYS.SOURCE: The Hacker News• 2026-07-25T18:22:43+05:30

Critical Fastjson 1.x RCE Vulnerability Exploited in Active Attacks Without Available Patch

#vulnerability #remote code execution #java security #open source security #patch management

A critical remote code execution (RCE) vulnerability in Fastjson 1.x (CVE-2026-16723) is being actively exploited without a patched version available, allowing unauthenticated attackers to execute arbitrary code in affected Spring Boot applications. Organizations are advised to enable SafeMode or migrate to Fastjson2 as temporary mitigations while Alibaba works on a permanent fix.

Security firms ThreatBook and Imperva say attackers are targeting a critical flaw in Fastjson, Alibaba's JSON library for Java. In affected Spring Boot applications, a malicious JSON request can execute code without authentication, with the privileges of the Java process.

Tracked as CVE-2026-16723, the vulnerability carries an Alibaba-assigned CVSS score of 9.0. The confirmed chain requires

Read original article

*** END OF TRANSMISSION ***

> PROFOUND ACHIEVES UNICORN STATUS WITH $180M SERIES D FUNDING IN 7 MONTHS > WONDER EXPANDS FOOD DELIVERY NETWORK WITH $425M DOORDASH PARTNERSHIP > AI-POWERED CAMERA APP DEVELOPED BY FORMER TIKTOK EXECUTIVES AIMS TO ENHANCE PORTRAIT PHOTOGRAPHY SKILLS > SCALING STARTUPS FROM PROTOTYPE TO PRODUCTION: INSIGHTS FROM TECHCRUNCH DISRUPT 2026 > INDIA INTRODUCES MERCHANT FEES FOR LARGE UPI TRANSACTIONS TO ENSURE FINANCIAL SUSTAINABILITY > FIREFOX 156 ENHANCES PDF VIEWER PERFORMANCE WITH 45% FASTER STARTUP > EVVY SECURES $40M TO ADVANCE WOMEN'S HEALTH RESEARCH VIA VAGINAL MICROBIOME DATA > GLOBAL BOND YIELDS REACH 2008-LEVEL PEAKS, IMPACTING MAJOR BORROWERS > TECHCRUNCH DISRUPT 2026 EXHIBIT OPPORTUNITIES CLOSING IN FOUR DAYS > PANEL: AN AGENT-DRIVEN RESEARCH WORKSPACE WITH CUSTOMIZABLE PANES> PROFOUND ACHIEVES UNICORN STATUS WITH $180M SERIES D FUNDING IN 7 MONTHS > WONDER EXPANDS FOOD DELIVERY NETWORK WITH $425M DOORDASH PARTNERSHIP > AI-POWERED CAMERA APP DEVELOPED BY FORMER TIKTOK EXECUTIVES AIMS TO ENHANCE PORTRAIT PHOTOGRAPHY SKILLS > SCALING STARTUPS FROM PROTOTYPE TO PRODUCTION: INSIGHTS FROM TECHCRUNCH DISRUPT 2026 > INDIA INTRODUCES MERCHANT FEES FOR LARGE UPI TRANSACTIONS TO ENSURE FINANCIAL SUSTAINABILITY > FIREFOX 156 ENHANCES PDF VIEWER PERFORMANCE WITH 45% FASTER STARTUP > EVVY SECURES $40M TO ADVANCE WOMEN'S HEALTH RESEARCH VIA VAGINAL MICROBIOME DATA > GLOBAL BOND YIELDS REACH 2008-LEVEL PEAKS, IMPACTING MAJOR BORROWERS > TECHCRUNCH DISRUPT 2026 EXHIBIT OPPORTUNITIES CLOSING IN FOUR DAYS > PANEL: AN AGENT-DRIVEN RESEARCH WORKSPACE WITH CUSTOMIZABLE PANES