CVE-2026-39550

HighCVSS 8.1

Published: 02/06/2026(UTC)Updated: 22/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.31%

23th percentile - higher than 23% of all known CVEs

Deserialization of Untrusted Data vulnerability in Elated-Themes Aperitif allows Object Injection. This issue affects Aperitif from n/a through 1.6.

An attacker could remotely execute arbitrary code or gain unauthorized access by injecting a malicious object during deserialization.

Immediately update the Aperitif theme to the latest available version that includes deserialization security fixes.

Original NVD description (English source)

Deserialization of Untrusted Data vulnerability in Elated-Themes Aperitif allows Object Injection. This issue affects Aperitif: from n/a through 1.6.