Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
1 IOC

Critical Spring GraphQL Deserialization Flaw Enables Remote Code Execution

Cyber Press
Cyber Press
Published August 25, 2026Original Report

Excerpt

A critical unsafe deserialization vulnerability in Spring for GraphQL, tracked as CVE-2026-59285, could enable remote code execution in affected applications under specific conditions. The flaw was disclosed in Broadcom’s August 20 security release, which included 91 CVEs affecting Spring Framework and related projects. Sonatype assigned CVE-2026-59285 a CVSS score of 9.2, placing it in the Critical severity range. The issue affects applications using Spring for GraphQL with…

Read the original report →

Indicators of Compromise

Open the mindmap →

1 indicators

TypeIndicatorConfidenceScoreFirst Seen
CVECVE-2026-59285MediumScore 51/100First seen

IOC Relationship Graph

Building graph…