deserialization

Everything Vector Bulletin has reported about deserialization: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

Java Deserialization Vulnerabilities: Causes, Fixes and Gadget Chains

Java deserialization flaws bypass code execution controls by abusing trusted object reconstruction logic, rendering standard input validation ineffective against crafted data streams.

Oct 15, 2026

Vulnerabilities

Gutentype Plugin Object Injection Vulnerability: CVSS 9.8 Threatens Versions Up to 2.1.12

The National Vulnerability Database has assigned a CVSS 9.8 score to an object injection vulnerability in the ThemeREX Gutentype WordPress plugin.

Oct 10, 2026