CVE-2026-65572

CriticalCVSS 9.8

Published: 06/08/2026(UTC)Translated: 06/08/2026(UTC)NVD NIST

Summary

Unauthenticated PHP Object Injection in A.Williams versions up to 1.3.1.

An unauthenticated attacker can exploit this vulnerability to execute arbitrary code or compromise data integrity.

Update the A.Williams plugin to the latest version that addresses this vulnerability.

Original NVD description (English source)

Unauthenticated PHP Object Injection in A.Williams <= 1.3.1 versions.