CVE-2026-114403

The PHPOffice PHPPresentation library (versions through 1.2.0 ) is vulnerable to an insecure deserialization flaw in the Reader bSerialized::load function. An attacker can exploit this by uploading a crafted ZIP file containing a PhpPresentation.xml file. When IOFactory::load processes this file,...