Threats tagged 'ghsa-mq39-r4w7-92mj'

CVE-2026-65572 is a critical vulnerability in Axiomthemes A.Williams versions up to and including 1.3.1. It involves unauthenticated PHP Object Injection due to deserialization of untrusted data (CWE-502). This flaw allows an attacker to execute arbitrary code remotely without any authentication. The vulnerability has a CVSS score of 9.8, indicating a high impact on confidentiality, integrity, and availability.