Do Son Seven Spring GraphQL vulnerabilities were patched on August 20, including CVE-2026-59285, an unsafe deserialization flaw that can lead to remote code execution.
unsafe deserialization
CVE-2026-63077, an unauthenticated RCE in JetBrains TeamCity, is exploited in the wild. PoC exploit code and full details are now public.
Qwik framework patches a critical 9.2 CVSS RCE vulnerability (CVE-2026-27971) where unsafe deserialization in server$ RPC allows total server takeover.
Critical PHPUnit flaw CVE-2026-24765 (CVSS 7.8) allows RCE via unsafe deserialization in coverage files. Vulnerability hits CI/CD pipelines. Update now.
Critical CVSS 9.8 flaw in vLLM allows remote code execution via PyNcclPipe. Patch to 0.8.5 now to protect your AI infrastructure.