CVE-2026-104747

Unauthenticated PHP Object Injection vulnerabilities in Haaken versions up to 1.5 allow attackers to exploit the application by injecting malicious objects, potentially leading to remote code execution or unauthorized access to sensitive data. Organizations using affected versions should prioritize patching this vulnerability to mitigate the risk of exploitation, especially those with web-facing applications.