CVE-2016-8901

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

September 18, 2026

Last Seen

September 18, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Vulnerability in b2evolution CMS Exposes Users to PHP Object Injection64.5

b2evolution CMS versions 6.7.8 through 7.2.5 have an incomplete fix for CVE-2016-8901, allowing unauthenticated attackers to exploit the param_check_serialized_array() function. Attackers can bypass validation by using negative integer keys in serialized arrays, leading to potential code execution t...