CVE ID :CVE-2026-94075 Published : 24 octobre 2026 08:00 | 16 minutes ago Description :Deserialization of Untrusted Data vulnerability in Tribulant Software Newsletters newsletters-lite allows Object Injection.This issue affects Newsletters: from n/a through 4.18.1. Severity: 9.8 |...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-94075 - WordPress Newsletters plugin <= 4.18.1 - PHP Object Injection vulnerability

VERWANDTEARTIKEL

U.S. CISA adds Arista VeloCloud Orchestrator flaw to its Known Exploited Vulnerabilities catalog

CVE-2026-114196 - WordPress Paytium plugin <= 5.0.5 - PHP Object Injection vulnerability

CVE-2026-112866 - WordPress Product Filter by WBW plugin <= 3.4.6 - SQL Injection vulnerability

CVE-2026-111402 - WordPress Newsletters plugin <= 4.18.1 - SQL Injection vulnerability

Palo Alto Confirms PHP RCE Vulnerabilities Impact PAN-OS and Multiple Network Products

CVE-2026-115806 - Prime Mover <= 2.2.1 - Unauthenticated PHP Object Injection via Base64-Encoded Comment during Migration Search-and-Replace