VDB
CVE-2026-23737
CVE-2026-23737
PUBLISHED
CVSS 7.5 HIGH
seroval Affected by Remote Code Execution via JSON Deserialization
EPSS 0.59% · 46.9th percentile
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.59%
46.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| lxsmnsyc | seroval | < 1.4.1, 0, 0 |
| npm | seroval | 0, 0 |
Timeline
- Jan 21, 2026 CVE Published
- Jan 22, 2026 CVE Updated
- Jan 22, 2026 EPSS Score
- Jan 22, 2026 PoC Published
- Jan 22, 2026 PoC Published
- Jan 25, 2026 EPSS Score
- Jan 28, 2026 EPSS Score
- Jan 30, 2026 Security Advisory
- Jan 31, 2026 EPSS Score
- Feb 3, 2026 EPSS Score
- Feb 6, 2026 EPSS Score
- Feb 9, 2026 EPSS Score