CVE-2026-16723 — Remote Code Execution in fastjson 1.2.68–1.2.83
A remote code execution (RCE) vulnerability exists in fastjson 1.2.68 through 1.2.83. This vulnerability is exploitable under fastjson's stock default configuration — no AutoTyp…
Published: 2026-07-23 · CVSS: 9.0 · CVSS 3.1
A remote code execution (RCE) vulnerability exists in fastjson 1.2.68 through 1.2.83. This vulnerability is exploitable under fastjson's stock default configuration — no AutoType enablement required, no classpath gadget required.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7