CVE-2021-23758: Ajax.NET Professional Ajax.NET Professional

Ajax.NET Professional (AjaxPro) contains a deserialization of untrusted data vulnerability that could allow for remote code execution via arbitrary .NET classes. The impacted product(s) could be end-of-life (EoL) and/or end-of-service (EoS). Users are advised to discontinue use and/or transition to a supported version.

Vendor: Ajax.NET Professional
Product: Ajax.NET Professional
Vulnerability: Ajax.NET Professional Deserialization of Untrusted Data Vulnerability
Date added: Aug 26, 2026
CISA due date (U.S. federal agencies): Sep 9, 2026
Known ransomware campaign use: Unknown
Weakness (CWE): CWE-502

References

NVD — CVE-2021-23758
github.com
www.cisa.gov
www.cisa.gov
nvd.nist.gov

This site summarizes CISA's catalog for information only. It is not security advice — follow your vendor's guidance and official advisories.

Last updated: Oct 4, 2026 17:31 UTC · Catalog version 2026.10.02