This vulnerability in PressMart (versions <=1.2.26) is caused by unsafe deserialization of untrusted data, leading to unauthenticated PHP Object Injection. The vulnerability is identified as CWE-502 and allows remote attackers to potentially execute arbitrary code, compromise confidentiality, integrity, and availability. The CVSS 3.1 base score is 8.1, reflecting network attack vector, high attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. No official patch or remediation guidance is currently available from the vendor or advisory sources.

Successful exploitation can lead to full compromise of the affected system, including arbitrary code execution, data disclosure, and denial of service. The vulnerability is exploitable remotely without authentication, but requires high attack complexity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the affected application to trusted networks and monitor for suspicious activity related to deserialization. Avoid processing untrusted serialized data where possible.