CVE-2026-16723 — Attackers target Fastjson 1.x flaw enabling unauthenticated code execution

19/100

ThreatBook and Imperva report attacks targeting CVE-2026-16723 in Fastjson. Malicious JSON requests can execute code with Java process privileges in affected Spring Boot applications, and the report states that no patch is available.