CVE-2026-78292

Unauthenticated PHP Object Injection vulnerability exists in Hash Form versions up to and including 1.4.1, allowing attackers to exploit the application by injecting malicious objects, potentially leading to remote code execution. Organizations using affected versions should prioritize patching this critical vulnerability to mitigate the risk of unauthorized access and system compromise. Immediate action is recommended for all users of Hash Form to safeguard their environments.