CWE-502

2,593 vulnerabilities with CWE-502

CVE-2026-22248 HIGH

GLPI 11.0.0-11.0.4 - Authenticated RCE

CVSS 8.0

CVE-2026-2626 HIGH

Divi-Booster <5.0.2 - CSRF & Object Injection

CVSS 8.1

CVE-2026-26114 HIGH

Microsoft Office SharePoint - Deserialization

CVSS 8.8

CVE-2026-25166 HIGH

Windows System Image Manager - Deserialization

CVSS 7.8

CVE-2026-1286 HIGH

Unspecified Product - Deserialization

CVE-2026-27685 CRITICAL

SAP NetWeaver - Deserialization

CVSS 9.1

CVE-2026-2020 HIGH

WordPress JS Archive List <=6.1.7 - Deserialization

CVSS 7.5

CVE-2026-28277 MEDIUM

LangGraph SQLite Checkpoint <=1.0.9 - Deserialization

CVSS 6.8

CVE-2026-27749 HIGH

Avira Internet Security - Deserialization

CVSS 7.8

CVE-2026-2599 CRITICAL

Database for Contact Form 7 <1.4.7 - Deserialization

CVSS 9.8

CVE-2026-28105 CRITICAL

ThemeREX Good Energy <=1.7.7 - Deserialization

CVSS 9.8

CVE-2026-28074 CRITICAL

ThemeREX Pizza House <=1.4.0 - Deserialization

CVSS 9.8

CVE-2026-27439 CRITICAL

ThemeREX Dentario <=1.5 - Deserialization

CVSS 9.8

CVE-2026-27438 CRITICAL

ThemeREX Kingler <=1.7 - Deserialization

CVSS 9.8

CVE-2026-27437 CRITICAL

ThemeREX Tennis Club <=1.2.3 - Deserialization

CVSS 9.8

CVE-2026-27417 CRITICAL

SeventhQueen Sweet Date <4.0.1 - Deserialization

CVSS 9.8

CVE-2026-27379 HIGH

NextScripts social-networks-auto-poster <=4.4.7 - Deserialization

CVSS 8.8

CVE-2026-27369 HIGH

BoldThemes Celeste <=1.3.6 - Deserialization

CVSS 8.1

CVE-2026-27338 HIGH

AivahThemes Car Zone <=3.7 - Deserialization

CVSS 8.8

CVE-2026-27098 HIGH

axiomthemes Au Pair Agency <=1.2.2 - Deserialization

CVSS 8.1

CVE-2026-24385 HIGH

Podlove Web Player <=5.9.1 - Deserialization

CVSS 7.5

CVE-2026-23798 HIGH

blubrry PowerPress Podcasting <=11.15.10 - Deserialization

CVSS 8.8

CVE-2026-22501 CRITICAL

Mounthood <=1.3.2 - Deserialization

CVSS 9.8

CVE-2026-22497 CRITICAL

AncoraThemes Jardi <=1.7.2 - Deserialization

CVSS 9.8

CVE-2026-22475 CRITICAL

axiomthemes Estate <=1.3.4 - Deserialization

CVSS 9.8