CVE-2026-66650

FreightCo versions up to 1.1.15 are vulnerable to unauthenticated PHP Object Injection, allowing attackers to exploit this flaw to execute arbitrary code on the server. This critical vulnerability poses a significant risk to any organization using affected versions, as it can lead to complete system compromise. Organizations should prioritize patching or upgrading their FreightCo installations to mitigate potential exploitation.