Threats Tagged 'cve-2026-54159'
View all threats tagged with 'cve-2026-54159'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-54159'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-54159 is a critical vulnerability in the PrestaShop ps_facetedsearch module versions 3.0.0 up to but not including 4.0.4. The module improperly handles slider filter values from the URL without sufficient validation, leading to unsafe deserialization of user-controlled data. This allows an unauthenticated attacker to inject a malicious serialized PHP object into the internal cache, which upon deserialization writes an arbitrary PHP file to the server. The malicious file can be used as a webshell to execute commands remotely. The issue is fixed in version 4.0.4. Join the discussion | GCVE Database | 07/17/2026, 20:39:25 UTC Added: 07/11/2026, 09:36:51 UTC |
Showing 1 to 1 of 1 result