CVE-2020-26118

CVE-2020-26118 is a post-authentication Java deserialization vulnerability affecting SmartBear Collaborator Server versions through 13.3.13302. An authenticated attacker can exploit this flaw by submitting a malicious serialized Java object to the server, leading to arbitrary command execution on the underlying system. With a CVSS score of 8.8 (High), this vulnerability is easily exploitable over the network with low attack complexity and no user interaction required, potentially resulting in complete compromise of confidentiality, integrity, and availability. While no public exploit code or active exploitation has been observed, and community discussion is minimal, the inherent risk remains significant due to the nature of the vulnerability.