Skip to content

Security news, verified and fast

Deserialization

Everything Vector Tribune has reported about Deserialization: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

EspoCRM 9.3.7 Blocks Arbitrary Code Execution by Restricting Allowed Classes During Deserialization

A critical flaw in EspoCRM versions before 9.3.7 lets authenticated administrators execute arbitrary code through unsafe data handling.

Oct 15, 2026

Vulnerabilities

CVSS 9.8: Unauthenticated RCE in openPDC/openHistorian via Unsafe Deserialization

Unauthenticated attackers can execute code on Grid Protection Alliance servers via unsafe deserialization in service consoles.

Oct 9, 2026