Threats tagged 'ghsa-v8f6-j65h-jxr8'

CVE-2026-62018 is an unauthenticated PHP Object Injection vulnerability affecting Gunslinger versions up to and including 1.11. This vulnerability allows an attacker to inject malicious PHP objects without authentication, potentially leading to full system compromise. The vulnerability has a critical severity with a CVSS score of 9.8, indicating high impact on confidentiality, integrity, and availability.