All CVEs
CVE-2026-62077
CRITICAL9.8
Published 2026-10-10 · Source audit@patchstack.com
Description
Unauthenticated PHP Object Injection in Avala <= 1.1.4 versions.
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-502
Published 2026-10-10 · Source audit@patchstack.com
Unauthenticated PHP Object Injection in Avala <= 1.1.4 versions.
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H