SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-84752

HIGH · CVSS 8.8 EPSS 0.29%

Source: NVD + CISA KEV + EPSS · Published 2026-09-03 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

RTMKit versions up to 2.1.5 are vulnerable to PHP Object Injection, which could allow an attacker to execute arbitrary code or manipulate application behavior through crafted input. This high-severity vulnerability poses significant risks to systems utilizing RTMKit, particularly those handling sensitive data or critical operations. Organizations using affected versions should prioritize immediate remediation to mitigate potential exploitation.

CVE
CVE-2026-84752
Severity
HIGH
CVSS
8.8
EPSS
0.29%

Original NVD Description

Contributor PHP Object Injection in RTMKit <= 2.1.5 versions.