CVE-2026-52706NVD

Unauthenticated PHP Object Injection in JetEngine <= 3.8.10 versions.

Severity Level

CRITICAL(9.8)

Published Date

Jun 17, 2026

Last Modified

Jun 17, 2026

Exploitation Status

????

EPSS Score (30-Day)

Data Pending

Root Weakness (CWE)

N/A

CVSS v3.1 Base Metrics

Attack VectorNetwork

Attack ComplexityLow

Privileges RequiredNone

User InteractionNone

ScopeUnchanged

ConfidentialityHigh

IntegrityHigh

AvailabilityHigh

CVE Watchtower