Critical Spring GraphQL Deserialization Flaw Enables Remote Code Execution
Tue Aug 25 2026
Open Source
Patch Management
Vulnerability
cyberpress.org
A critical unsafe deserialization vulnerability in Spring for GraphQL, tracked as CVE-2026-59285, could enable remote code execution in affected applications under specific conditions. The flaw was disclosed in Broadcom’s August 20 security release, which included 91 CVEs affecting Spring Framework and related projects. Sonatype assigned CVE-2026-59285 a CVSS score of 9.2, placing it in the […]
The post Critical Spring GraphQL Deserialization Flaw Enables Remote Code Execution appeared first on Cyber Security News.