ACTIVELY EXPLOITED
CVE-2023-29492: Novi Survey Insecure Deserialization Vulnerability
| Vendor | Novi Survey |
|---|---|
| Product | Novi Survey |
| Actively exploited | Yes |
| Added to CISA KEV | 13 Apr 2023 |
| CISA federal deadline | 4 May 2023 |
| Weakness (CWE) | CWE-94 |
Required action (CISA's text)
Apply updates per vendor instructions.
Description (NVD)
Novi Survey contains an insecure deserialization vulnerability that allows remote attackers to execute code on the server in the context of the service account.
SOURCES
Data from NVD, CISA KEV, FIRST EPSS and vendor advisories. Updated 10 Nov 2026.