CVE-2026-62016

34th percentile - higher than 34% of all known CVEs

PHP Object Injection vulnerability in the Gamic theme in versions up to and including 1.19. It can be exploited without authentication, allowing an attacker to inject a malicious PHP object.

An unauthenticated attacker can exploit the vulnerability to inject a PHP object, potentially leading to remote code execution or other severe impacts depending on available gadgets.

Update Gamic to a version later than 1.19 or apply available mitigations. Consider auditing the code for unsafe deserialization.