Threat database

CVE-2026-93945 is a critical deserialization of untrusted data vulnerability in Axiomthemes Balance up to version 1.12.0. It allows object injection, potentially leading to full compromise of confidentiality, integrity, and availability. The vulnerability has a CVSS score of 9.8, indicating a high severity with no required privileges or user interaction for exploitation.

CVE-2026-93944 is a critical vulnerability in ThemeREX Group's Camelia product that allows deserialization of untrusted data, leading to object injection. This flaw affects versions from the initial release up to and including 1.2.15. The vulnerability has a high CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability without requiring user interaction or privileges.

CVE-2026-93943 is a critical deserialization of untrusted data vulnerability in ThemeREX Group's Convex product. It allows object injection attacks and affects versions from the initial release through 1.16.0. The vulnerability has a high CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability.

CVE-2026-93942 is a critical vulnerability in ThemeREX Group's Dwell theme that allows deserialization of untrusted data, leading to object injection. This affects versions from 0 up to and including 1.16.0. The vulnerability has a high CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability if exploited.

CVE-2026-93941 is a critical deserialization of untrusted data vulnerability in ThemeREX Group's Edema product. This flaw allows object injection attacks and affects versions from 0 up to and including 1.2.2.2. The vulnerability has a high CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability. No patch or remediation details are currently provided.

CVE-2026-93940 is a critical vulnerability in ThemeREX Group's Greeny product affecting versions from 0 up to and including 2.10.0. It involves deserialization of untrusted data, which allows object injection. The vulnerability has a high CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability.

CVE-2026-93938 is a critical vulnerability in ThemeREX Group's Hogwords product that allows deserialization of untrusted data leading to object injection. This flaw affects versions from 0 up to and including 1.2.7. The vulnerability has a high CVSS score of 9.8, indicating it can be exploited remotely without privileges or user interaction, resulting in complete confidentiality, integrity, and availability compromise.

CVE-2026-93937 is a critical deserialization of untrusted data vulnerability in ThemeREX Group's Hygia product. It allows object injection, potentially leading to full compromise of confidentiality, integrity, and availability. The issue affects all versions from initial release up to and including 1.21.0. The vulnerability has a CVSS 3.1 score of 9.8, indicating high severity. No known exploits are reported in the wild. No patch or remediation details are provided in the available data.

CVE-2026-93936 is a critical vulnerability in ThemeREX Group's IPharm product, affecting versions from 0 up to and including 1.2.4. It involves deserialization of untrusted data, which allows object injection. The vulnerability has a high CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability.

CVE-2026-93935 is a critical deserialization of untrusted data vulnerability in ThemeREX Group's Let's Play product, affecting versions from 0 up to and including 1.1.15. The flaw allows object injection, which can lead to full compromise of confidentiality, integrity, and availability. The vulnerability has a high CVSS score of 9.8, indicating severe impact if exploited. No official patch or remediation details are provided in the available data.