CVE-2026-114704: Deserialization of Untrusted Data in Christoph Vielgrader Relevanssi
Affects Christoph Vielgrader RelevanssiSource CVE Database V5
0
Not known to be exploited · CVSS 7.2 High : patch Christoph Vielgrader Relevanssi soon.
Data as of 10/24/2026, 16:08:18 UTC
CVSS 3.1 base score
7.2High
How severe the flaw is on the 0–10 CVSS scale.
- Exploitation
Not in CISA KEV, no exploitation reported
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HWhat to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| Christoph VielgraderRelevanssi | Affected
| Fixed in– |
AI-suggested
Users should monitor vendor communications for updates and apply any official patches once available.
Description
Deserialization of Untrusted Data vulnerability in Christoph Vielgrader Relevanssi relevanssi allows Object Injection.This issue affects Relevanssi : from n/a through 4.28.4.
Impact
The vulnerability allows an attacker with high privileges to perform object injection via deserialization of untrusted data, potentially leading to full compromise of the affected system's confidentiality, integrity, and availability.
References
Community reviews
Loading reviews…