CVE-2026-27206

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

February 21, 2026

Last Seen

February 22, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

CVE-2026-27206: RCE Vulnerability in Zumba Json Serializer Affects PHP Applications48.1

CVE-2026-27206 identifies a vulnerability in the Zumba Json Serializer library, affecting versions 3.2.2 and below. The library's deserialization feature allows attackers to instantiate arbitrary PHP classes via untrusted JSON input, leading to potential remote code execution (RCE). Applications uti...