Frequency
2
occurrences
First Seen
February 21, 2026
Last Seen
February 22, 2026
Related Threat Clusters
-
CVE-2026-27206: RCE Vulnerability in Zumba Json Serializer Affects PHP Applications
CVE-2026-27206 identifies a vulnerability in the Zumba Json Serializer library, affecting versions 3.2.2 and below. The library's deserialization feature allows attackers to instantiate arbitrary PHP classes via…
2 articles · Updated February 22, 2026
Recent Intelligence Reports
- CVE-2026-27206: CWE-502: Deserialization of Untrusted Data in zumba json — Radar.Offseq · February 22, 2026
- CVE-2026-27206: The Zumba Class Dance: RCE via PHP Object Injection in json — Dev.To · February 21, 2026