Threats affecting pkg:composer/elated-themes/konsept

CVE-2026-39556 is a high severity vulnerability affecting Elated-Themes Konsept versions up to and including 1.9. It involves unauthenticated PHP object injection, categorized under CWE-502 (Deserialization of Untrusted Data). This vulnerability allows an attacker to inject malicious PHP objects without authentication, potentially leading to full compromise of confidentiality, integrity, and availability of the affected system.