HIGHVulnerability
Verified
Global

CISA KEV: Ajax.NET Professional Ajax.NET Professional — Ajax.NET Professional Deserialization of Untrusted Data Vulnerability

·Source: CISA KEV

Updated:

Executive Summary

Ajax.NET Professional (AjaxPro) contains a deserialization of untrusted data vulnerability that could allow for remote code execution via arbitrary .NET classes. The impacted product(s) could be end-of-life (EoL) and/or end-of-service (EoS). Users are advised to discontinue use and/or transition to a supported version.

Analysis

Ajax.NET Professional (AjaxPro) contains a deserialization of untrusted data vulnerability that could allow for remote code execution via arbitrary .NET classes. The impacted product(s) could be end-of-life (EoL) and/or end-of-service (EoS). Users are advised to discontinue use and/or transition to a supported version. Added to CISA Known Exploited Vulnerabilities catalog on 2026-08-26. Remediation due: 2026-09-09.

Indicators of Compromise (1)

CVE (1)
CVE-2021-23758
NVDMITRE CVE
Source Attribution

Originally published by CISA KEV on Aug 26, 2026. Verified by: CISA.

Related Threats

LOWVulnerability

The Fine Art of Frustrating the Adversary

What really frustrates an adversary? Eight Cisco Talos researchers share practical ways to make their next move slower and riskier. From deception and behavioral detection to breaking attack dependencies and resisting manufactured urgency.

Cisco Talos
MEDIUMVulnerability

Agents Pick Dependencies, DoWI 8430.01 Holds You Accountable

<div class="hs-featured-image-wrapper"> <a href="https://www.sonatype.com/blog/your-agents-are-choosing-dependencies.-dowi-8430.01-says-you-own-the-result" title="" class="hs-featured-image-link"> <img src="https://www.sonatype.com/hubfs/Fed%20-%20Policy.png" alt="Image with hexagon shape at center containing a checkbox icon. The hexagon is surrounded by checkmarks throughout the image" class="hs-

Sonatype (Maven/npm)
MEDIUMVulnerability

Hackers stole Pentagon personnel records of over 3 million people

The Pentagon's Defense Manpower Data Center (DMDC) is notifying millions of military service members that hackers stole their data after breaching the Pentagon's human resources management system in October 2025. [...]

BleepingComputer