SEPTEMBER 15, 2026
Live Feed
Back to database
Case File

CVE-2026-82226

CRITICAL · CVSS 9.8 EPSS 0.31%

Source: NVD + CISA KEV + EPSS · Published 2026-08-31 · Last synced 2026-09-15

CyberRota Analysis

AI-Generated

Tickera versions up to 3.6.0.2 are vulnerable to unauthenticated PHP Object Injection, allowing attackers to exploit this weakness to execute arbitrary code on the server. This critical vulnerability poses a significant risk to any organization using affected versions, as it could lead to complete system compromise. Organizations utilizing Tickera should prioritize immediate patching or mitigation efforts to safeguard their systems against potential exploitation.

CVE
CVE-2026-82226
Severity
CRITICAL
CVSS
9.8
EPSS
0.31%

Original NVD Description

Unauthenticated PHP Object Injection in Tickera <= 3.6.0.2 versions.