CVE-2026-65574

CriticalCVSS 9.8

Published: 06/08/2026(UTC)Updated: 06/08/2026(UTC)Translated: 06/08/2026(UTC)NVD NIST

Summary

Unauthenticated PHP Object Injection in Abogado versions up to 1.18.

An unauthenticated attacker can exploit this vulnerability to execute malicious code or escalate privileges.

Update the Abogado plugin to the latest version that addresses this vulnerability.

Original NVD description (English source)

Unauthenticated PHP Object Injection in Abogado <= 1.18 versions.