CRITICAL
9.8 CVE-2026-54856 Published 29 Oct 2026
RexCoin PHP Object Injection Vulnerability
Worried this affects your website?
RexCoin versions up to and including 1.2.6 contain an unauthenticated PHP Object Injection vulnerability.
The flaw is reachable without authentication on affected installations.
Reference: CVE-2026-54856 on NVD
← Back to Security News