VulnRadar

Data against noise.

Built with NaN
Page generated: 09 Nov 2026, 08:10 UTC
← Dashboard

CVE-2021-23758

SPECTRE

All versions of package ajaxpro.2 are vulnerable to Deserialization of Untrusted Data due to the possibility of deserialization of arbitrary .NET classes, which can be abused to gain remote code execution.

CVSS 8.1 (HIGH) KEV: KNOWN CATALOG

Attention and evidence

HYPE SCORE
7.3/10
REALITY · THREAT PRIORITY
8.6/10
General review priority; not probability

Evidence confidence: Exploitation recorded

Why this priority?
  • Recorded exploitation baseline: +7.00
  • Technical severity: CVSS 8.1: +1.21
  • Fresh EPSS: 82.58%: +0.41

General review priority, not probability, victim count or asset-specific risk. A range covers missing CVSS/EPSS inputs within the current evidence state.

Sources: 35 documents and public datasets.

Hype components

Headline sample (25%)
30/100
Press, 30 days (60%)
85/100
Grounded branding (15%)
100/100
HYPE TOTAL74/100

Sources and documents

BBC
Press · 02 Nov 2026, 07:24 · Witness History | The first Day of the Dead parade - BBC
Vietnam Investment Review - VIR
Press · 02 Nov 2026, 07:07 · Danish garment maker Spectre opens fourth factory in Hung Yen - Vietnam Investment Review - VIR
Prestige Online - Singapore
Press · 02 Nov 2026, 05:04 · Omega debuts Seamaster Diver 300m James Bond and Spectre editions - Prestige Online - Singapore
Goal.com
Press · 01 Nov 2026, 10:41 · Bruno leads the way: the spectre of departure threatens four big names at Manchester United - Goal.com
Metal Temple Magazine
Press · 01 Nov 2026, 09:46 · Dead Kosmonaut - Retro Spectre - Metal Temple Magazine
See all 35 source documents
MotorTrend
Press · 30 Oct 2026, 18:33 · First Drive: The 2027 Rolls-Royce Spectre II Adds Range, Power, and Some Wild Options - MotorTrend
coe.int
Press · 28 Oct 2026, 14:51 · Spectre of depopulation over Europe from rural exodus and overtourism - coe.int
Fandom Pulse
Press · 27 Oct 2026, 13:30 · Walter Koenig’s Favorite Star Trek Episode “Spectre Of A Gun” Retrospective - Fandom Pulse
The Arab Weekly
Press · 26 Oct 2026, 12:59 · Trump revives spectre of 9/11 to oppose Michigan Muslim Senate candidate - The Arab Weekly
The New York Times
Press · 25 Oct 2026, 07:00 · The spectre of Antonio Conte looms over Manchester United. Should they press the button? - The Athletic - The New York Times
Designboom
Press · 23 Oct 2026, 07:00 · first drive: rolls-royce spectre series II brings more range, speed and material craft to stockholm - Designboom
MoMA
Press · 20 Oct 2026, 23:45 · Theodore Roszak. Study for Spectre of Kitty Hawk. 1944–45 - MoMA
CIProud.com
Press · 20 Oct 2026, 07:00 · WMBD This Morning Upstage Theatre Spectre Calls - CIProud.com
Road & Track
Press · 16 Oct 2026, 07:00 · Tested: 2027 Rolls-Royce Spectre Series II Is a Silent Assassin - Road & Track
Robb Report
Press · 12 Oct 2026, 07:00 · Omega Gives the Villain His Due at Its New James Bond Exhibition - Robb Report
Fratello Watches
Press · 11 Oct 2026, 07:00 · Sunday Morning Showdown: Omega Seamaster Diver 300M James Bond Vs. Spectre Edition - Fratello Watches
Worn & Wound
Press · 09 Oct 2026, 07:00 · Inside the Release Party Omega’s New Bond and Spectre-Edition Seamasters with CEO Raynald Aeschlimann - Worn & Wound
Flaunt Magazine
Press · 06 Oct 2026, 21:53 · OMEGA | The James Bond And Spectre Collection - Flaunt Magazine
Haute Time
Press · 06 Oct 2026, 07:00 · OMEGA Unveils the Seamaster Diver 300M James Bond & Spectre Collection: Timeless Adversaries, Side by Side - Haute Time
Spectre Journal
Press · 06 Oct 2026, 07:00 · Borders as Capitalist Machinery - Spectre Journal
Man of Many
Press · 06 Oct 2026, 07:00 · James Bond or Spectre? Omega’s New Seamaster Collection Makes You Choose a Side - Man of Many
SJX Watches
Press · 06 Oct 2026, 07:00 · Duelling Dials: Omega’s James Bond and Spectre Seamasters - SJX Watches
Forbes
Press · 05 Oct 2026, 07:00 · Omega Combines James Bond And Spectre In New Seamaster Collection - Forbes
Hodinkee
Press · 05 Oct 2026, 07:00 · Introducing The New Omega Seamaster Diver 300M James Bond & Spectre Editions (Live Pics) - Hodinkee
shattered.io
Press · 27 Sep 2026, 07:00 · CISA KEV Adds 2 CVEs as BOD 26-04 Cuts Deadline [2026] - shattered.io
MSSP Alert
Press · 11 Sep 2026, 07:00 · AI-powered threat actor UAT-10147 targets web servers for fraud and data theft - MSSP Alert
Recorded Future
Press · 08 Sep 2026, 07:00 · August 2026 CVE Landscape - Recorded Future
Recorded Future
Press · 08 Sep 2026, 07:00 · Panorama des CVE d'août 2026​​ - Recorded Future
Security Affairs
Press · 28 Aug 2026, 07:00 · U.S. CISA adds Red Hat, Linux Kernel, Ajax.NET Professional, Microsoft SQL Server, and Citrix NetScaler fla... - Security Affairs
Infosecurity Magazine
Press · 27 Aug 2026, 07:00 · CISA Warns of Six Exploited Flaws in Microsoft, Linux, Red Hat and Citrix Products - Infosecurity Magazine
The Hacker News
Press · 27 Aug 2026, 07:00 · CISA Adds Six Exploited Flaws to KEV, Including NetScaler, Linux, and SQL Server Bugs - The Hacker News
Help Net Security
Press · 27 Aug 2026, 07:00 · Previously patched Citrix NetScaler flaw exploited in the wild (CVE-2026-8452) - Help Net Security
The Hacker News
Press · 24 Aug 2026, 07:00 · UAT-10147 Uses AI to Scale Server Attacks, Deploys SPECTRE With EDR Bypass and Linux Rootkit - The Hacker News
Cisco Talos Blog
Press · 20 Aug 2026, 07:00 · UAT-10147: Chinese-speaking adversary integrates agentic AI into post-compromise operations - Cisco Talos Blog
Cisco Talos Blog
Press · 20 Aug 2026, 07:00 · UAT-10147 deploys SPECTRE: A cross-platform implant with Linux rootkit and BYOVD capabilities - Cisco Talos Blog

Score evolution

● Hype   ● Reality

Earlier evidence-support scores are retained in history; this chart shows only the current priority definition.

024681002 Nov 2026 · HIGH ATTENTION + OBSERVED EXPLOITATIONHype 8.2Reality 8.606 Nov 2026 · HIGH ATTENTION + OBSERVED EXPLOITATIONHype 7.3Reality 8.6Nov 2Nov 6

━ Hype Score (Perceived)  ━ Reality threat priority. Definition changes are not new attacks.

Public exploit evidence

1

Public exploit entries / repo candidates

See 1 repos with metrics
RepositoryStarsForksLanguageUpdated
numanturle/CVE-2021-23758-POC186JavaScript15 Dec 2021, 16:37
Evidence context and dated references

Reality is general threat/review priority, combining observed exploitation, CVSS severity and fresh EPSS. Evidence confidence is separate. This is not calibrated risk, a victim count or an asset-specific assessment. A range reflects missing numeric inputs.

Evidence in context

Confidence in exploitation evidence
Exploitation recorded
Priority basis
Recorded exploitation; CVSS 8.1; EPSS 82.6%
Attention, last 30 days
16 distinct story titles; 16 press documents; 1 publisher domains.
Technical potential
network access, no prior privileges, no user interaction, additional attack conditions.
Observed activity
Exploitation recorded in CISA KEV.
Known scale
Not quantified.
Evidence confidence basis
Trusted exploitation confirmation

Score evaluated: 2026-11-06 00:12:49.640935+00:00 · EPSS snapshot: 2026-11-05T12:03:04Z

Source event timeline
Published
03 Dec 2021, 20:05
First press mention
20 Aug 2026, 07:00
Added to the CISA KEV catalog
26 Aug 2026, 00:00
Latest press mention
02 Nov 2026, 07:24
Score calculated
06 Nov 2026, 00:12
Name
SPECTRE
PoCs on GitHub
1 repositories
Source: CVE List V5 · CISA KEV · FIRST EPSS · GitHub · RSSVulnRadar