CRITICAL
9.8 CVE-2026-54857 Published 29 Oct 2026
Quirky Unauthenticated PHP Object Injection Vulnerability
Worried this affects your website?
A security flaw has been reported in Quirky versions 1.23 and earlier.
The issue is an unauthenticated PHP Object Injection vulnerability.
Reference: CVE-2026-54857 on NVD
← Back to Security News