Threat database

4 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Critical	9.8	EPSS 0.4%	CVE-2026-62076Kalles · Deserialization of Untrusted Data Critical9.8EPSS 0.4%2026-10-10CVE Database V5CVE-2026-62076 CVE-2026-62076 is a critical vulnerability in The4 Kalles versions up to 1.1.7.1 that allows unauthenticated PHP Object Injection due to deserialization of untrusted data. This flaw can lead to full compromise of confidentiality, integrity, and availability without requiring user interaction or privileges. EPSS 0.4%Vulnerability The4 #cwe-502	CVE Database V5	2026-10-10
Medium	6.5	EPSS 0.2%	CVE-2026-81778Kalles Addons · Cross-site Scripting Medium6.5EPSS 0.2%2026-08-31CVE Database V5CVE-2026-81778 Subscriber Cross Site Scripting (XSS) in Kalles Addons <= 1.0.6 versions. EPSS 0.2%Vulnerability The4 #cwe-79	CVE Database V5	2026-08-31
Critical	9.8	EPSS 0.6%	CVE-2026-73389Kalles Addons · Deserialization of Untrusted Data Critical9.8EPSS 0.6%2026-08-19CVE Database V5CVE-2026-73389 CVE-2026-73389 is a critical vulnerability in The4 Kalles Addons versions up to and including 1.0.6. It involves unauthenticated PHP Object Injection due to deserialization of untrusted data (CWE-502). This flaw allows remote attackers to execute arbitrary code without any authentication. The vulnerability has a high CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability. EPSS 0.6%Vulnerability The4 #cwe-502 #ghsa-m7jf-qrf9-6rj3	CVE Database V5	2026-08-19
Medium	6.5	EPSS 0.2%	CVE-2025-60070Molla · Code Injection Medium6.5EPSS 0.2%2025-12-18CVE Database V5CVE-2025-60070 Improper Control of Generation of Code ('Code Injection') vulnerability in The4 Molla molla allows Code Injection.This issue affects Molla: from n/a through <= 1.5.13. EPSS 0.2%Vulnerability The4	CVE Database V5	2025-12-18

Showing 1–4 of 4 results