CVE-2026-27206 - Vulnerability Details

Frequency

occurrences

First Seen

February 21, 2026

Last Seen

February 22, 2026

CVE-2026-27206 is a vulnerability tracked across 1 threat cluster and 2 intelligence report mentions on ThreatCluster. First observed February 21, 2026; most recent activity February 22, 2026.

Related Threat Clusters

CVE-2026-27206: RCE Vulnerability in Zumba Json Serializer Affects PHP Applications
CVE-2026-27206 identifies a vulnerability in the Zumba Json Serializer library, affecting versions 3.2.2 and below. The library's deserialization feature allows attackers to instantiate arbitrary PHP classes via…

2 articles · Updated February 22, 2026

Recent Intelligence Reports

CVE-2026-27206: CWE-502: Deserialization of Untrusted Data in zumba json — Radar.Offseq · February 22, 2026
CVE-2026-27206: The Zumba Class Dance: RCE via PHP Object Injection in json — Dev.To · February 21, 2026

Related Entities

Remote Code Execution Zero-day Exploit Australia Canada France Germany India Japan Netherlands South Korea United Kingdom United States

CVE-2026-27206 - Vulnerability Details

Entity Not Found

Related Threat Clusters

Recent Intelligence Reports

Related Entities

CVSS v3.1 Breakdown