CVE-2026-118562
Deserialization of Untrusted Data vulnerability in Drupal Single Content Sync allows Object Injection. This issue affects Single Content Syn
CVSS
—
Sin CVSS
EPSS
—
KEV
—
Exploit Today
—
0-100
Publicado: 30 oct 2026 · Última mod.: 30 oct 2026 · CWE-502
Sin historial EPSS suficiente todavía.
Deserialization of Untrusted Data vulnerability in Drupal Single Content Sync allows Object Injection. This issue affects Single Content Sync versions: from 0.0.0 to 1.4.19.
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-107238——
———A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) as the LocalSystem account on servers running the Veeam Management Pack for Microsoft System Center Collector service.12hCVE-2023-22793——
———A vulnerability allowing an unauthenticated attacker to perform remote code execution (RCE) on servers running the Veeam Virtualization Extensions service of Veeam Management Pack for Microsoft System Center.12hCVE-2026-621319.8 CRÍ—
———Unauthenticated PHP Object Injection in Zoho Flow <= 2.14.5 versions.19hCVE-2026-620189.8 CRÍ—
———Unauthenticated PHP Object Injection in Gunslinger <= 1.11 versions.15hCVE-2026-620179.8 CRÍ—
———Unauthenticated PHP Object Injection in Good Homes <= 1.3.13 versions.17hCVE-2026-620169.8 CRÍ—
———Unauthenticated PHP Object Injection in Gamic <= 1.19 versions.19h