← Back to CVE search

CVE-2026-32470

FundEngine

Description

Unauthenticated PHP Object Injection in FundEngine <= 1.7.9 versions.

CVSS 9.8EPSS 0.375%Risk 1.01
View source
Published
2026-08-18 15:16:52
Affected versions
<=1.7.9
Type
Web application
Last modified
2026-08-20 12:48:31
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H