PHP Object Injection - Vulnerability

Related Threat Clusters

• Critical PHP Object Injection Vulnerability in Mirasvit Cache Warmer

  A critical vulnerability, CVE-2026-45247, has been identified in the Mirasvit Full Page Cache Warmer for Magento 2, allowing unauthenticated remote code execution via a crafted CacheWarmer cookie. The flaw, rated 9.8 on…

  8 articles · Updated June 4, 2026
• Multiple Critical Vulnerabilities Disclosed Affecting Various Products

  A series of critical vulnerabilities (CVEs) have been disclosed affecting multiple products, all with a CVSS score of 9.8. CVE-2026-25775 allows unauthorized firmware operations on SenseLive X3050. CVE-2026-8935 enables…

  16 articles · Updated June 16, 2026
• CVE-2026-27206: RCE Vulnerability in Zumba Json Serializer Affects PHP Applications

  CVE-2026-27206 identifies a vulnerability in the Zumba Json Serializer library, affecting versions 3.2.2 and below. The library's deserialization feature allows attackers to instantiate arbitrary PHP classes via…

  2 articles · Updated February 22, 2026

Recent Intelligence Reports

• CRITICAL: CVE-2026-49105 (CVSS 9.8) — multiple products — Lyrie.Ai · June 16, 2026
• Critical Vulnerability in Mirasvit Full Page Cache Warmer for Magento 2 — Csa.Sg · June 5, 2026
• CVE-2026-27206: The Zumba Class Dance: RCE via PHP Object Injection in json — Dev.To · February 21, 2026

Related Entities