Insecure Deserialization Vulnerability in WebITR by Uniong

CVE-2026-113404

What is CVE-2026-113404?

The WebITR application, developed by Uniong, contains an Insecure Deserialization vulnerability that can be exploited by authenticated remote attackers. By utilizing a hard-coded cryptographic key, attackers are able to craft and submit malicious serialized data to the server. This exploitation can lead to arbitrary code execution, posing significant security risks to the affected systems and their data integrity.

References