CRITICALVulnerability
Global

Unpatched Fastjson Vulnerability Exploited in Attacks

·Source: SecurityWeek

Updated:

Executive Summary

The critical remote code execution bug can be exploited without authentication, under the library’s stock default configurations. The post Unpatched Fastjson Vulnerability Exploited in Attacks appeared first on SecurityWeek .

Analysis

The critical remote code execution bug can be exploited without authentication, under the library’s stock default configurations. The post Unpatched Fastjson Vulnerability Exploited in Attacks appeared first on SecurityWeek .
Source Attribution

Originally published by SecurityWeek on Jul 28, 2026.

Related Threats

MEDIUMVulnerabilityNEW

Zimbabwe regulator approves seven fintechs for sandbox

The Securities and Exchange Commission of Zimbabwe has given the green light to a number of fintechs seeking to participate in its regulatory sandbox.

Finextra
MEDIUMVulnerabilityNEW

New CREST AI Standards to Deliver AI-Enabled Pentesting Accreditation

CREST’s new AI standards are optional add-on requirements for cybersecurity service providers wishing to demonstrate responsible AI usage

Infosecurity Magazine
CRITICALVulnerability

NVD CRITICAL: CVE-2026-15014 — The SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart ...

The SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeover in all versions up to, and including, 3.9.7 via the `billing_phone` parameter. This is due to the `processRegistration()` function using a phone-unbound `$_SESSION['sa_mobile_verified']` boolean flag as the sole gate before

CVE-2026-15014
NIST NVD