What happened
Deserialization vulnerability in WebLogic exploited via JRMPClient4 ysoserial payload.
Affected versions
Unknown product: See original advisory Fixed: See vendor advisory.
Why it matters
This source correlation may provide earlier visibility while structured CVE metadata is still being updated.
Detection & mitigation
- Review the original advisory and validate affected versions.
- Apply vendor-provided updates or mitigations when available.
Public PoC references
RepositoryAuthorFirst seenReference
SploitusDeserialization vulnerability in WebLogic exploited via JRMPClient4 ysoserial payload.KitPloit2026-09-14T22:19:41Candidatekitploit.comDeserialization vulnerability in WebLogic exploited via JRMPClient4 ysoserial payload.ja2026-09-14T22:19:41CandidatePoC-in-GitHub · Draven996/CVE-2018-2893CVE-2018-2893★ 0Draven9962018-07-19CandidatePoC-in-GitHub · artofwar344/CVE-2018-2893CVE-2018-2893 PoC★ 0artofwar3442018-07-19CandidatePoC-in-GitHub · bigsizeme/CVE-2018-2893反弹shell生成器★ 17bigsizeme2018-07-20CandidatePoC-in-GitHub · pyn3rd/CVE-2018-2893CVE-2018-2893-PoC★ 105pyn3rd2018-07-22CandidatePoC-in-GitHub · qianl0ng/CVE-2018-2893可以直接反弹shell★ 47qianl0ng2018-07-26CandidatePoC-in-GitHub · jas502n/CVE-2018-2893CVE-2018-2893★ 13jas502n2018-10-07CandidatePoC-in-GitHub · ianxtianxt/CVE-2018-2893CVE-2018-2893★ 0ianxtianxt2019-11-05CandidateSource timeline
Discovered through SploitusView source ↗
Record history
Record created from the first normalized source observation.
Metadata and source references refreshed.