45075 matches found
CVE-2026-39446: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Kapee 1.7.0 versions...
CVE-2026-39442: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in PressMart = 1.2.26 versions...
PT-2026-50395
Unauthenticated PHP Object Injection in PressMart = 1.2.26 versions...
CVE-2026-54194: Deserialization of Untrusted Data
Contributor PHP Object Injection in Fusion Builder = 3.15.4 versions...
CVE-2025-60229: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in Themeton Lagom allows Object Injection. This issue affects Lagom: from n/a through 2.0...
CVE-2026-39580: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Micdrop = 1.3.1 versions...
CVE-2026-39577: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Playroom = 1.4.1 versions...
PT-2026-50401
Unauthenticated PHP Object Injection in SingleMalt = 1.5 versions...
CVE-2026-39578: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Valiance = 1.2 versions...
CVE-2026-39560: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Hiroshi = 1.5.1 versions...
PT-2026-50400
Unauthenticated PHP Object Injection in Hiroshi = 1.5.1 versions...
CVE-2026-39557: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in NeoBeat = 1.7 versions...
CVE-2026-39539: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Alloggio - Hotel Booking = 2.1.2 versions...
CVE-2026-39556: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Konsept = 1.9 versions...
PT-2026-50398
Unauthenticated PHP Object Injection in Konsept = 1.9 versions...
CVE-2026-39554: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Fidalgo = 1.2.2 versions...
CVE-2026-39529: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Elementra = 1.0.9 versions...
PT-2026-50606
Name of the Vulnerable Software and Affected Versions Drupal core affected versions not specified Description An attacker with appropriate JSON:API write permissions could potentially inject a malicious payload in certain rare circumstances, leading to PHP Object Injection. PHP Object Injection...
PT-2026-50582
Name of the Vulnerable Software and Affected Versions Drupal Formatter Field versions 0.0.0 through 2.0.0 Description Improperly controlled modification of dynamically-determined object attributes in the Formatter Field module allows for Object Injection. This occurs because the module stores dat...