CWE-502

2,987 vulnerabilities with CWE-502

CVE-2026-60366 CRITICAL

Oracle Platform Security for Java 12.2.1.4.0, 14.1.2.0.0 - Unauthenticated Remote Code Execution via HTTP

CVSS 10.0

CVE-2026-13190 HIGH

PersistenceFramework Unsafe Type Resolution Vulnerability in Telerik UI for ASP.NET AJAX

CVSS 8.1

CVE-2026-13185 HIGH

PersistenceFramework Cookie Deserialization Vulnerability in Telerik UI for ASP.NET AJAX

CVSS 8.1

CVE-2026-47058 HIGH

Oracle Java SE 8u491/8u491-perf/11.0.31: Unauthenticated Data Mod & Info Disclosure via Scripting APIs

CVSS 7.4

CVE-2026-24232 MEDIUM

Nvidia Tranformers4Rec - Deserialization of Untrusted Data

CVSS 4.3

CVE-2026-64606 CRITICAL

Apache Fory, Apache Fory: Class-registration bypass through an auto-admitted SerializedLambda capturing interface

CVSS 9.8

CVE-2026-64608 CRITICAL

Apache Fory: Heap type confusion and out-of-bounds read/write in C++ compatible-mode field-skip paths

CVSS 9.8

CVE-2026-63767 CRITICAL

ktransformers Unauthenticated Pickle Deserialization RCE via ZMQ

CVSS 9.8

CVE-2026-28220 HIGH

Wazuh < 4.14.5 Cluster DAPI - Privileged Function Execution

CVSS 8.4

CVE-2026-12484 HIGH

Unsafe Deserialization in keras.layers.TorchModuleWrapper.from_config

CVSS 7.8

CVE-2026-8476 CRITICAL

IBM Langflow OSS - Disk Cache Deserialization Remote Code Execution Vulnerability

CVSS 9.9

CVE-2026-45162 HIGH

Pimcore: Unsafe PHP Deserialization in Multiple Locations Without allowed_classes Restriction

CVSS 8.0

CVE-2026-14890 CRITICAL

SGLang < 0.5.14 - Remote Code Execution

CVSS 9.1

CVE-2026-15008 HIGH

Uncanny Automator <= 7.3.1.4 - Unauthenticated PHP Object Injection to Arbitrary File Deletion via Forminator Submitted-Field Token

CVSS 8.1

CVE-2026-47472 HIGH

Nvidia TensorRT-LLM < v1.3.0 rc16 - Deserialization of Untrusted Data

CVSS 7.8

CVE-2026-24233 HIGH

Nvidia TensorRT-LLM < v1.3.0 rc14 - Deserialization of Untrusted Data

CVSS 8.4

CVE-2026-24227 MEDIUM

Nvidia TensorRT < v1.3.0 rc14 - Deserialization of Untrusted Data

CVSS 5.3

CVE-2026-24220 MEDIUM

Nvidia TensorRT-LLM < v1.3.0 rc11 - Deserialization of Untrusted Data

CVSS 6.4

CVE-2026-50649 HIGH

Microsoft .NET and Visual Studio - Local Code Execution via Deserialization

CVSS 7.8

CVE-2026-50646 HIGH

Microsoft .NET Framework, .NET, and Visual Studio - Local Code Execution

CVSS 7.8

CVE-2026-55944 CRITICAL

Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability

CVSS 9.8

CVE-2026-50509 HIGH

Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability

CVSS 7.8

CVE-2026-45077 HIGH

Symfony: Unauthenticated PHP Object Deserialization in MonologBridge server:log Listener

CVSS 8.6

CVE-2026-58644 CRITICAL KEV

Microsoft SharePoint Remote Code Execution Vulnerability

CVSS 9.8

CVE-2026-55009 HIGH

Microsoft Exchange Server Elevation of Privilege Vulnerability

CVSS 7.8