sign in--:--:--UTC

CVE-2026-16723

exploited in the wild☆ pin

CVSS

9.0

Reports

3

First seen

Jul 25, 2026

Last seen

Jul 28, 2026

Affected product

Fastjson 1.2.68–1.2.83 in Spring Boot executable fat-JAR deployments

Recent reports

Arista VeloCloud Orchestrator Command Injection Flaw Under Active Exploitation

The Hacker NewsJul 28, 2026 Critical

Hackers target US firms in FastJson RCE zero-day attacks

Bleeping ComputerJul 28, 2026 Critical

Fastjson 1.x RCE Vulnerability Actively Exploited in Attacks; No Patch Available

The Hacker NewsJul 25, 2026

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans