References https://www.gigabyte.com/us/Support/Security/2376 https://www.twcert.org.tw/en/cp-139-10806-fbc4a-2.html https://github.com/advisories/GHSA-x497-46w3-2gh7 https://nvd.nist.gov/vuln/detail/CVE-2026-4416 https://www.cve.org/CVERecord?id=CVE-2026-4416 https://www.twcert.org.tw/tw/cp-132-10805-a53f6-1.html https://www.gigabyte.com/Support/Security/2376 https://cert.kenet.or.ke/cve-2026-4416-gigabyteperformance-library-insecure-deserialization https://www.sentinelone.com/vulnerability-database/cve-2026-4416/
Related VulnerabilitiesPoCCVE-2017-7504: JBossMQ HTTP Invocation Layer (HTTPServerILServlet) - Unauthenticated Java DeserializationPoCCVE-2015-7501: Red Hat JBoss - Insecure DeserializationPoCCVE-2019-1003030: Jenkins Pipeline Groovy Plugin <=2.63 - Insecure DeserializationPoCCVE-2025-26399: SolarWinds Web Help Desk < 12.8.7 - AjaxProxy Deserialization RCEPoCCVE-2026-58644: Microsoft SharePoint Server - WS-Federation BinaryFormatter Deserialization RCE英華達|全家寶 Cloud - Insecure Direct Object ReferencePoCCVE-2024-42323: Apache HertzBeat < 1.6.0 - SnakeYAML Deserialization Remote Code ExecutionPoCCVE-2026-35273: Oracle PeopleSoft PeopleTools PSEMHUB - Pre-Auth Java Deserialization RCEProgress WhatsUp Gold /NmConsole/Platform/PerformanceMonitorErrors/HasErrors SQL 注入漏洞(CVE-2024-6670)PoCCVE-2026-46725: TYPO3 ceselector Extension - Insecure Deserialization沛盛資訊|OMICARD EDM - Insecure Direct Object Reference金財通商務科技|Service Center - Insecure Direct Object ReferencePoCCVE-2026-33439: OpenAM <= 16.0.5 - Pre-Auth RCE via jato.clientSession Deserialization