Topic
5 articles
CyberSecureToday covers CWE-502 across 5 articles published between 23 Sep 2026 and 14 Oct 2026.
The coverage includes 5 vulnerability advisories. 5 advisories are rated critical or high severity.
Stories on CWE-502 most often intersect with Remote Code Execution, SCADA and Deserialization, with Technology, Cloud & SaaS the most affected sector. The most recent story, “Abandoned Cart Pro for WooCommerce Insecure Deserialization Flaw CVE-2026-97657 Patched”, was published 14 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.
CMS SecurityTyche Softwares resolves a critical PHP object injection flaw in Abandoned Cart Pro for WooCommerce (CVE-2026-97657) enabling unauthenticated remote code execution.
Threat IntelAn unauthenticated RPyC service in LightLLM visual_only deployments enables remote attackers to execute arbitrary code on GPU clusters via pickle deserialization.
OT / SCADACISA Advisory ICSA-26-242-01 warns of a critical unauthenticated remote code execution vulnerability in Rockwell Automation FactoryTalk View SE.
OT / SCADACISA ICS Advisory ICSA-26-225-01 warns of an unsafe deserialization flaw in AVEVA Enterprise SCADA systems allowing remote code execution on critical control nodes.
AWS CloudAWS and OpenSearch release bulletin 2026-092-AWS for high-severity flaw CVE-2026-83497 in the SQL plugin allowing authenticated users to execute code via cursors.