CVE-2026-78286

The vulnerability allows unauthenticated PHP Object Injection in Geo Controller versions 8.9.8 and earlier, potentially enabling attackers to execute arbitrary code on the server. This critical flaw poses a significant risk to any organization using affected versions, as it can lead to full system compromise. Organizations should prioritize immediate patching or mitigation efforts to safeguard their systems against potential exploitation.