Hackers target US firms in FastJson RCE zero-day attacks
Hackers exploit FastJson RCE zero-day in US firms, targeting multiple industries.
A critical remote code execution zero-day vulnerability (CVE-2026-16723) in the FastJson Java library is being actively exploited by hackers to target U.S. organizations across various sectors. The flaw affects versions 1.2.68 through 1.2.83 and allows attackers to execute code without user interaction. As FastJson 1.x is no longer actively maintained, there is no immediate fix, and users are advised to enable SafeMode or migrate to fastjson2.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Alibaba?
Get an email when a new story names Alibaba, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonA critical zero-day vulnerability in the widely-used FastJson Java library (CVE-2026-16723) is being actively exploited against U.S. organizations, enabling unauthenticated remote code execution with no user interaction required. The root problem lies in reliance on an end-of-life open-source component that no longer receives active security maintenance, leaving affected organizations with no vendor-issued patch. This highlights the compounding risk of unmanaged third-party library dependencies — when a popular library reaches end-of-life, any newly discovered flaw becomes an indefinite exposure. Organizations that lack a software bill of materials (SBOM) or automated dependency tracking are especially blind to where FastJson exists in their environments, delaying detection and response.
What helps against this
How we list vendors
- Vulnerability scanning and prioritisation
You know which systems are vulnerable, and which ones to fix first.
- Automated patch management
Known holes get closed in days, not months.
- Software supply chain security
Malicious and vulnerable open-source packages are caught before they ship.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- cve — CVE-2026-16723