Fastjson

Alibaba Fastjson 1.x checkAutoType Bypass to Remote Code Execution via jar:http SSRF and fd-Reread Trick (CVE-2026-16723) new EPSS 16%CVE-2026-16723webCRITICAL 9Unpatched2026-07-31