CVE-2026-27060 describes a deserialization of untrusted data vulnerability in Repute Infosystems ARMember Premium. The issue affects all versions up to and including 7.0. Exploitation allows an attacker with low privileges and no user interaction to perform object injection, resulting in high impact on confidentiality, integrity, and availability. There is no vendor advisory or patch available at this time, and no known exploits in the wild have been reported.

Successful exploitation can lead to full compromise of the affected system's confidentiality, integrity, and availability. Given the nature of object injection via deserialization, attackers may execute arbitrary code or manipulate application logic.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the affected application and monitor for suspicious activity related to deserialization processes.