CVE-2026-27206: RCE Vulnerability in Zumba Json Serializer Affects PHP Applications
Article Content
Browse articles 
CVE-2026-27206 identifies a vulnerability in the Zumba Json Serializer library, affecting versions 3.2.2 and below. The library's deserialization feature allows attackers to instantiate arbitrary PHP classes via untrusted JSON input, leading to potential remote code execution (RCE). Applications utilizing this library are at risk if they process attacker-controlled JSON data.
Ask AI about this cluster
Answers cite the sources they use
Updated 226d ago How this analysis works
Timeline
2026-02-21
CVE-2026-27206 published
2026-02-21
Dev.To article published
2026-02-22
Radar.Offseq article published
More articles in this cluster (2)
Following this threat?
Track CVE-2026-27206 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…