TI-2026-41413 CVE-2026-57527 · GHSA-grq4-7pwr-9rmp
ZAP ViewState Add-on Insecure Deserialization via JSFViewState.decode()
Priority MEDIUM 41
Zed Attack Proxy (ZAP) ViewState add-on before version 4 contains an insecure deserialization vulnerability that allows attackers who control a proxied web server to achieve arbitrary code execution by embedding a malici…