Back to the CVE list
CVE-2026-16723

Improper input validation

CVSS score

9.0

EPSS probability

%0.7

Risk score

0.1

Published

2 mo ago

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

fastjson vulnerability scanner - detect fastjson in JARs and Spring Boot fat-JARs, check exposure to CVE-2026-16723, and verify whether you already run the official patch 1.2.84. Zero-dependency offline CLI. fastjson 漏洞检测与排查工具:一条命令扫描依赖,支持 fat-JAR 与 shaded 依赖,并判定是否已升到官方补丁版本 1.2.84。

Public PoCSource updated: 14.10.2026 13:58:00

A critical vulnerability affecting Fastjson versions 1.2.68 – 1.2.83.

Public PoCSource updated: 12.10.2026 03:32:38

yym8538/CVE-2026-16723

Public PoCSource updated: 25.09.2026 11:50:15

fastjson jsontype利用

Public PoCSource updated: 23.09.2026 05:37:06

learner330/fastjson-cve-2026-16723

Public PoCSource updated: 06.09.2026 01:35:11

This is N-day patch we releasing by testing our model capabilities

Public PoCSource updated: 31.07.2026 08:47:38

Fastjson RCE

Public PoCSource updated: 30.07.2026 07:44:53

Fastjson 1.2.83 RCE 靶场环境 (CVE-2026-16723)

Public PoCSource updated: 13.08.2026 07:13:41

Docker labs + defensive scanner for fastjson remote-class-load RCE. fastjson 1.2.66-1.2.83: @JSONType resource probe (CVE-2026-16723). fastjson2 2.0.57: attacker @type reaches loadClass with autoType DISABLED via polymorphic types (@JSONType(seeAlso) / Jackson @JsonSubTypes). Marker-only payloads; safeMode + JDK17 controls.

Public PoCSource updated: 13.10.2026 19:11:06

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-16723"