CVE-2026-39529NVD

Unauthenticated PHP Object Injection in Elementra <= 1.0.9 versions.

Severity Level

CRITICAL(9.8)

Published Date

Jun 16, 2026

Last Modified

Jun 16, 2026

Exploitation Status

????

EPSS Score (30-Day)

Data Pending

Root Weakness (CWE)

N/A

CVSS v3.1 Base Metrics

Attack VectorNetwork

Attack ComplexityLow

Privileges RequiredNone

User InteractionNone

ScopeUnchanged

ConfidentialityHigh

IntegrityHigh

AvailabilityHigh

CVE Watchtower