Konstantin Belinski on Mythryl: “A very easy to read article about discovery of CVE-2026-16723 (RCE…”

A very easy to read article about discovery of CVE-2026-16723 (RCE in fastjson) and some details of how #Java Class Loaders and Resource Handling work. #cybersecurity fearsoff.org/research/fas...

fearsoff.orgFastJson 1.2.83 Remote Code ExecutionTurning fastjson 1.2.83 into remote code execution with AutoType off and no gadget on the classpath: an SSRF inside checkAutoType, the @JSONType bypass, and a /proc/self/fd trick that carries it from ...

6/8/26, 7:53 am0 reposts0 likes

Post