CVE Catalog
CVE-2026-74012
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk0.48%
40th percentile - higher than 40% of all known CVEs
Summary
A vulnerability in TaxoPress (up to version 3.51.0) involves deserialization of untrusted data, allowing Object Injection.
Risk Assessment
An attacker could exploit this to execute arbitrary code or perform other attacks, potentially leading to full system compromise.
Recommendation
Update TaxoPress to a version newer than 3.51.0 if a patch is available, or apply other mitigations recommended by the vendor.
Original NVD description (English source)
Deserialization of Untrusted Data vulnerability in TaxoPress allows Object Injection. This issue affects TaxoPress: from n/a through 3.51.0.