PT-2026-50326

Unauthenticated PHP Object Injection in AI Lab 5.4.2 versions...

PT-2026-50321

Unauthenticated PHP Object Injection in EasyMeals = 1.5.1 versions...

PT-2026-50336

Contributor PHP Object Injection in JetEngine = 3.8.9.1 versions...

PT-2026-50345

Unauthenticated PHP Object Injection in JetEngine = 3.8.10 versions...

PT-2026-50339

Unauthenticated PHP Object Injection in Thrive Apprentice 10.8.10.2 versions...

PT-2026-50406

Unauthenticated PHP Object Injection in Manufaktur Solutions = 1.1.1 versions...

PT-2026-50398

Unauthenticated PHP Object Injection in Konsept = 1.9 versions...

PT-2026-50408

Unauthenticated PHP Object Injection in Château = 1.2.1 versions...

PT-2026-50387

Deserialization of Untrusted Data vulnerability in EMV The Hospital nrghospital allows Object Injection. This issue affects The Hospital: from n/a through 1.8.1...

PT-2026-50405

Unauthenticated PHP Object Injection in Eldon = 1.4.1 versions...

PT-2026-50388

Deserialization of Untrusted Data vulnerability in EMV Creatify allows Object Injection. This issue affects Creatify: from n/a through 1.5...

PT-2026-50407

Unauthenticated PHP Object Injection in Zoya = 1.4 versions...

PT-2026-50386

Deserialization of Untrusted Data vulnerability in Themeton The Barber Shop allows Object Injection. This issue affects The Barber Shop: from n/a through 1.9...

PT-2026-50401

Unauthenticated PHP Object Injection in SingleMalt = 1.5 versions...

PT-2026-50612

Name of the Vulnerable Software and Affected Versions Drupal Plotly.js Graphing versions 0.0.0 through 3.0.2 Description Improperly controlled modification of dynamically-determined object attributes allows object injection. The module stores certain data as PHP-serialized strings, and if malicio...

CVE-2026-49108: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Moderno 1.43 versions...

CVE-2026-40757: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Château = 1.2.1 versions...

CVE-2026-40752: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Manufaktur Solutions = 1.1.1 versions...

CVE-2026-40733: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in ShiftUp = 1.3 versions...

CVE-2026-39556: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Konsept = 1.9 versions...