Sploitus

11 exploited vulnerabilities in Fastjson

Vulnerabilities with publicly known exploits

Vendors
Alibaba, Fastjson, Hikvision, None, Wukongopensource, Msfm
With known exploits
11
Affected Alibaba Fastjson versions
< 1.2.83, 1.2.25
Affected Pippo versions
= 1.11.0

Vulnerabilities with exploits

Highest CVSS first — 3 of these already have exploit code on Sploitus

CVE-2025-70974
CVSS 10.0 CRITICAL 2026-01-09FIX AVAILABLE
CVE-2025-34067
CVSS 10.0 CRITICAL 2023-07-27
CVE-2022-25845 5 exploits
CVSS 10.0 HIGH 2022-05-06FIX AVAILABLE
fastjson-jsontype-rce-labExploit for Deserialization of Untrusted Data in Alibaba Fastjson
CVE-2017-18349 1 exploit
CVSS 10.0 CRITICAL 2018-10-23FIX AVAILABLE
Exploit for Improper Input Validation in Alibaba Fastjson
CVE-2024-23052
CVSS 9.8 CRITICAL 2024-02-01
CVE-2024-57766
CVSS 9.1 CRITICAL 2025-01-14
CVE-2024-57764
CVSS 9.1 CRITICAL 2025-01-14
CVE-2024-57763
CVSS 9.1 CRITICAL 2025-01-14
CVE-2026-16723 3 exploits
CVSS 9.0 CRITICAL 2026-07-21FIX AVAILABLE
Exploit for CVE-2026-16723Exploit for CVE-2026-16723
CVE-2025-63617
CVSS 6.5 MEDIUM 2025-11-10FIX AVAILABLE
CVE-2025-60834
CVSS 6.5 MEDIUM 2025-10-08