CVE-2026-9611

CVE-2026-9611 entry is rejected/not used; this candidate was issued in error.

Attackers can trigger deserialization of arbitrary data via the phar:// wrapper.

Fix for security vulnerability: Using the phar:// wrapper it was possible to trigger the unserialization of user provided data...