Skip to content
OpenAdvisories

Vendor

zaproxy

1 known vulnerabilities.

Products

zap-extensions 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-57527

    ZAP ViewState Add-on Insecure Deserialization via JSFViewState.decode()

    Zed Attack Proxy (ZAP) ViewState add-on before version 4 contains an insecure deserialization vulnerability that allows attackers who control a proxied web server to achieve arbitrary code execution by embedding a malicious serialized Java object in the javax…

    zaproxy zap-extensions