Subscriber PHP Object Injection in Dynamic User Directory <= 2.4 versions.

Critical CVSS 9.8

CVECVE-2026-42719

First seen2026-10-10 20:31 UTC

Disclosed2026-10-10 20:16 UTC

Last updated2026-10-10 20:31 UTC

Channel statusauto

Summary

Subscriber PHP Object Injection in Dynamic User Directory <= 2.4 versions.

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).