Themeton The Barber Shop contains a deserialization of untrusted data vulnerability (CWE-502) that permits object injection attacks. This issue affects versions up to 1.9 of the product. The vulnerability has a CVSS 3.1 base score of 9.8, reflecting network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. There is no vendor advisory or patch available at this time, and no known exploits in the wild have been reported.

Successful exploitation of this vulnerability could lead to full compromise of the affected system, including unauthorized disclosure, modification, or destruction of data, and disruption of service. The critical CVSS score reflects the potential for severe impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider applying temporary mitigations such as disabling or restricting deserialization functionality if possible, or employing web application firewalls to detect and block suspicious payloads related to object injection.