CRITICAL
9.8 CVE-2026-62131 Published 29 Oct 2026
Zoho Flow PHP Object Injection Vulnerability
Worried this affects your website?
Zoho Flow versions up to and including 2.14.5 are affected by an unauthenticated PHP Object Injection vulnerability.
Attackers can exploit this flaw without authentication.
Reference: CVE-2026-62131 on NVD
← Back to Security News