Lucene search
K

5 matches found

OSV
OSV
added 2026/02/21 7:16 a.m.4 views

DEBIAN-CVE-2026-27206

Zumba Json Serializer is a library to serialize PHP variables in JSON format. In versions 3.2.2 and below, the library allows deserialization of PHP objects from JSON using a special @type field. The deserializer instantiates any class specified in the @type field without restriction. When...

8.1CVSS6.2AI score0.0074EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/02/21 7:1 a.m.30 views

CVE-2026-27206 Zumba Json Serializer has a potential PHP Object Injection via Unrestricted @type in unserialize()

Zumba Json Serializer is a library to serialize PHP variables in JSON format. In versions 3.2.2 and below, the library allows deserialization of PHP objects from JSON using a special @type field. The deserializer instantiates any class specified in the @type field without restriction. When...

8.1CVSS0.0074EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/02/21 7:1 a.m.3 views

CVE-2026-27206 Zumba Json Serializer has a potential PHP Object Injection via Unrestricted @type in unserialize()

Zumba Json Serializer is a library to serialize PHP variables in JSON format. In versions 3.2.2 and below, the library allows deserialization of PHP objects from JSON using a special @type field. The deserializer instantiates any class specified in the @type field without restriction. When...

8.1CVSS6.2AI score0.0074EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/02/21 7:1 a.m.7 views

CVE-2026-27206

Zumba Json Serializer is a library to serialize PHP variables in JSON format. In versions 3.2.2 and below, the library allows deserialization of PHP objects from JSON using a special @type field. The deserializer instantiates any class specified in the @type field without restriction. When...

8.1CVSS6.3AI score0.0074EPSS
Exploits0References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2026/02/19 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2026-27206

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Zumba Json Serializer is a library to serialize PHP variables in JSON format. In versions 3.2.2 and below, the library allows deserialization of PHP objects fro...

8.1CVSS6AI score0.0074EPSS
Exploits0References3
Rows per page
Query Builder