CVE-2026-73389

CriticalCVSS 9.8

Published: 19/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.32%

25th percentile - higher than 25% of all known CVEs

Unauthenticated PHP Object Injection in Kalles Addons <= 1.0.6 versions.

An attacker can inject malicious PHP objects, potentially leading to code execution or data integrity breaches.

Upgrade Kalles Addons to a version newer than 1.0.6, which includes a fix for this vulnerability.

Original NVD description (English source)

Unauthenticated PHP Object Injection in Kalles Addons <= 1.0.6 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS