The vulnerability CVE-2026-23544 affects codetipi Valenti through version 5.6.3.5 and involves deserialization of untrusted data, which enables object injection attacks. This type of vulnerability can allow an attacker with low privileges and no user interaction to execute arbitrary code or manipulate application behavior, resulting in high impact on confidentiality, integrity, and availability. The CVSS v3.1 base score is 8.8, reflecting network attack vector, low attack complexity, required privileges, no user interaction, and high impact on all security properties. There is no vendor advisory or patch information available to confirm remediation status.

Successful exploitation of this vulnerability can lead to full compromise of the affected system, including unauthorized code execution, data manipulation, and denial of service. The CVSS score of 8.8 indicates a high impact on confidentiality, integrity, and availability. No known exploits have been reported in the wild so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider restricting access to the affected application and monitoring for suspicious activity related to object injection attempts. Avoid processing untrusted serialized data where possible.