Everything NetSec Observer has reported about Deserialization: 4 stories, newest first. Part of our Vulnerabilities coverage.
CVE-2026-110812 allows authenticated users with query permissions to execute arbitrary code and steal internal service credentials via unsafe data handling.
Python pickle executes arbitrary code during deserialization, turning trusted data sources into direct paths for remote code execution on your server.
Microsoft SQL Server versions through 2025 contain a high-severity deserialization flaw that lets authorized users run remote code.
A critical deserialization vulnerability in itthinx Affiliates versions up to 7.0.1 allows object injection of untrusted data.