Exploit for CVE-2026-16723

kitploit · 2026-09-02

Description

N-day patch in tools released to test model capabilities.

Entry point

Parameterkeyword · request body

Pathapi/products/search

Unauthenticated JSON parse path vulnerable to RCE via crafted @type leading to deserialization.

All known vulnerabilities by product

Spring Boot Fastjson

CVSS 9.0 for CVE-2026-16723

9.0

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:HIGH

Privileges Required:NONE

User Interaction:NONE

Scope:CHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

CVE Information

Exploit Details

Modified:2026-09-02 16:37

Last Seen:2026-09-04 02:08

Reporter:KitPloit

Tags

toolsN-day patchmodel capabilitiespatch release

Other exploits for CVE-2026-16723

2026-09-04 KitPloitKITPLOIT

2026-09-04 KitPloitKITPLOIT

fastjson-rce-lab

2026-09-04 KitPloitKITPLOIT

CVE-2026-16723 — Updated!

2026-09-02 KitPloitKITPLOIT

2026-09-02 KitPloitKITPLOIT

2026-09-02 KitPloitKITPLOIT

2026-08-30 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

Exploit Code

MARKDOWN4 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-FAZILBAIG1-CVE-2026-16723
# CVE-2026-16723

هذا تصحيح N-day نطلقه من خلال اختبار قدرات نموذجنا