CVE-2026-57859

Summary of CVE-2026-57859 : In e107 prior to version 2.3.8, a code execution vulnerability exists in the e_array deserialization handler. The e_array::unserialize() function only checks for the prefix 'array' before passing the stored value to eval(), allowing an attacker with out-of-band databas...