CVE-2026-66672

Flatastic versions up to 2.0 are susceptible to an unauthenticated PHP Object Injection vulnerability, allowing attackers to exploit this flaw to execute arbitrary code on the server. This critical vulnerability, rated 9.8 on the CVSS scale, poses a significant risk to any organization using affected versions, particularly those with public-facing applications. Organizations should prioritize patching or upgrading to mitigate potential exploitation.