CRITICAL
9.8 CVE-2026-62011 Published 29 Oct 2026
Bonbon Unauthenticated PHP Object Injection Vulnerability
Worried this affects your website?
Bonbon is affected by an unauthenticated PHP Object Injection vulnerability.
Versions up to and including 1.11 are vulnerable. The flaw can be exploited without authentication.
Reference: CVE-2026-62011 on NVD
← Back to Security News