AUGUST 15, 2026
Live Feed
Back to database
Case File

CVE-2026-65577

CRITICAL · CVSS 9.8 EPSS 0.31%

Source: NVD + CISA KEV + EPSS · Published 2026-08-06 · Last synced 2026-08-15

CyberRota Analysis

AI-Generated

The vulnerability allows unauthenticated PHP Object Injection in Advice versions up to 1.18.0, potentially enabling attackers to execute arbitrary code or manipulate application behavior. Organizations using affected versions should prioritize patching this critical flaw to mitigate the risk of exploitation. Immediate action is recommended for any systems relying on this software to protect sensitive data and maintain system integrity.

CVE
CVE-2026-65577
Severity
CRITICAL
CVSS
9.8
EPSS
0.31%

Original NVD Description

Unauthenticated PHP Object Injection in Advice <= 1.18.0 versions.