CRITICAL
9.8 CVE-2026-62009 Published 29 Oct 2026
Filmax Unauthenticated PHP Object Injection Vulnerability
Worried this affects your website?
Filmax versions 1.1.11 and earlier are affected by an unauthenticated PHP Object Injection vulnerability.
An attacker can exploit this without providing any authentication credentials.
- Affected versions: 1.1.11 and earlier
- Attack requirement: none (unauthenticated)
Reference: CVE-2026-62009 on NVD
← Back to Security News