ThreatsTechnology, Cloud & SaaSCriticalCISA Mandates Remediation for Ajax.NET Professional Object Deserialization RCE Flaw CVE-2021-23758 Under Active AttackFederal agencies and enterprise operators face urgent deadlines as CISA confirms active exploitation of CVE-2021-23758, an unauthenticated deserialization RCE in Ajax.NET Professional.Daniel Okafor·15 Sep 2026, 11:50 IST·8 min read