Threats Tagged 'ghsa-q73p-x2mp-8gm9'

1 threat

Threats Tagged 'ghsa-q73p-x2mp-8gm9'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.2	EPSS 0.5%	CVE-2026-114403PHPPresentation · Deserialization of Untrusted Data Critical9.2EPSS 0.5%2026-10-21CVE Database V5CVE-2026-114403 PHPOffice PHPPresentation through 1.2.0 contains an insecure deserialization vulnerability that allows attackers to instantiate arbitrary PHP objects by supplying a crafted presentation file. Attackers can upload a ZIP containing PhpPresentation.xml that IOFactory::load passes to unserialize(), enabling gadget-chain code execution, file writes, or denial of service. EPSS 0.5%Vulnerability PHPOffice #ghsa-q73p-x2mp-8gm9	CVE Database V5	2026-10-21

Showing 1–1 of 1 result