CVE-2026-94683

DesignSetGo versions up to 2.8.0 are vulnerable to PHP Object Injection, which could allow an attacker to exploit the application by injecting malicious objects, potentially leading to remote code execution or data manipulation. Organizations using this software should prioritize patching or mitigating this vulnerability due to its high severity and the potential for significant impact on system integrity and confidentiality.