CVE-2026-39443

HighCVSS 8.1

Published: 17/06/2026(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.40%

31th percentile - higher than 31% of all known CVEs

There is an unauthenticated PHP Object Injection vulnerability in EmallShop versions <= 2.4.21.

An attacker could exploit this vulnerability to perform malicious actions within the system, potentially compromising data.

It is recommended to upgrade to the latest version of EmallShop to mitigate this vulnerability.

Original NVD description (English source)

Unauthenticated PHP Object Injection in EmallShop <= 2.4.21 versions.