CVE-2026-57724

The vulnerability in Themeum Kirki allows for object injection due to the deserialization of untrusted data, impacting versions up to 6.0.12. This critical flaw could enable attackers to execute arbitrary code, potentially compromising the integrity and security of affected applications. Organizations using vulnerable versions of Kirki should prioritize immediate patching to mitigate the risk of exploitation.