Vulnerabilities
Update SQL Server 2019-2025 to Stop Authenticated Remote Code Execution
Microsoft warns that authorized attackers can run remote code on SQL Server versions 2019 through 2025 via a high-severity deserialization flaw.
deserialization
Everything Crypt Weekly has reported about deserialization: 3 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
ThemeREX Smart Casa Users Must Upgrade Past v1.0.12 to Fix Critical CVE-2026-93932 Deserialization Flaw
The National Vulnerability Database rates a deserialization flaw in ThemeREX Smart Casa as critical, affecting versions up to 1.0.12 with a CVSS score of 9.8.
Vulnerabilities
Upgrade Axiomthemes Balance Past 1.12.0 to Block CVSS 9.8 Remote Code Execution
Sites running Axiomthemes Balance versions 1.12.0 or earlier face severe risk from CVE-2026-93945, a deserialization issue allowing remote code execution.