CVE-2026-32470

FundEngine versions up to 1.7.9 are vulnerable to unauthenticated PHP Object Injection, allowing attackers to exploit this flaw to execute arbitrary code on the server. This critical vulnerability poses a significant risk to any organization using affected versions, as it could lead to unauthorized access and complete system compromise. Organizations utilizing FundEngine should prioritize immediate remediation to mitigate potential exploitation.