CVE Catalog
CVE-2026-65573
CriticalCVSS 9.8Summary
Unauthenticated PHP Object Injection in Abelle versions up to 1.22.
Risk Assessment
The vulnerability allows an unauthenticated attacker to inject malicious PHP objects, potentially leading to full application compromise.
Recommendation
Update the Abelle plugin to the latest version that includes the security fix.
Original NVD description (English source)
Unauthenticated PHP Object Injection in Abelle <= 1.22 versions.