cwe-502
Safeguard articles tagged "cwe-502" — guides, analysis, and best practices for software supply chain and application security.
77 articles
CVE-2025-26399: SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability
CVE-2025-26399 affects SolarWinds Web Help Desk and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-03-09.
CVE-2026-20963: Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
CVE-2026-20963 affects Microsoft SharePoint and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-03-18.
CVE-2026-20131: Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability
CVE-2026-20131 affects Cisco Secure Firewall Management Center (FMC) and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-03-19.
CVE-2023-21529: Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability
CVE-2023-21529 affects Microsoft Exchange Server and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-04-13.
CVE-2026-45247: Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability
CVE-2026-45247 affects Mirasvit Mirasvit Full Page Cache Warmer and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-06-03.
CVE-2026-12569: PTC Windchill and FlexPLM Improper Input Validation Vulnerability
CVE-2026-12569 affects PTC Windchill and FlexPLM and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-06-25.
CVE-2026-45659: Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability
CVE-2026-45659 affects Microsoft SharePoint Server and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-07-01.
CVE-2026-58644: Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
CVE-2026-58644 affects Microsoft SharePoint and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-07-16.
CVE-2026-50522: Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
CVE-2026-50522 affects Microsoft SharePoint and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-07-22.
CVE-2026-63077: JetBrains TeamCity Deserialization of Untrusted Data Vulnerability
CVE-2026-63077 affects JetBrains TeamCity and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-08-05.
CVE-2021-23758: Ajax.NET Professional Deserialization of Untrusted Data Vulnerability
CVE-2021-23758 affects Ajax.NET Professional Ajax.NET Professional and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-08-26.
Insecure deserialization vulnerabilities explained
Insecure deserialization vulnerabilities let attackers turn trusted classes into gadget chains for RCE. See real CVEs, affected languages, and fixes.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.