The vulnerability CVE-2026-32508 affects Mikado-Themes Halstein versions before 1.8 and is caused by deserialization of untrusted data, enabling object injection. This can result in integrity and availability impacts on the affected system. The CVSS 3.1 base score is 5.4, reflecting medium severity, with attack vector network, low attack complexity, low privileges required, no user interaction, and unchanged scope. No patch or vendor advisory is currently available to confirm remediation status.

Exploitation of this vulnerability can lead to integrity and availability issues in the affected Mikado-Themes Halstein product. Confidentiality is not impacted. The vulnerability can be exploited remotely with low privileges and no user interaction, potentially allowing an attacker to inject malicious objects during deserialization, which may disrupt normal application behavior or corrupt data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting network access to the affected application and monitor for unusual behavior related to deserialization processes. Avoid processing untrusted serialized data where possible.