Patch Forecast
Amber warning
Patch this week.

CVE-2026-116867

Contributor PHP Object Injection in Dynamic QR Code &#8211; generator <= 1.0.1 versions.

Risk score
63/100
CVSS
8.8 v3.1
Published
29 Oct 2026

Open in the live forecast Today's forecast

What to know

What it is
A high-severity vulnerability (CVSS 8.8) exists in Dynamic QR Code generator versions <= 1.0.1 due to a PHP Object Injection flaw, allowing an attacker to potentially inject malicious code, leading to high impact on confidentiality, integrity, and availability.
Affected
{'products': ['Dynamic QR Code generator'], 'packages': [], 'versions': ['<= 1.0.1']}
Fix
Check the linked advisory for a fix, as none is provided in the record.
Exploitation
No known exploitation

Why it is Amber

  • CVSS 8.8 high
  • On your watchlist: php

References

Original description

Contributor PHP Object Injection in Dynamic QR Code &#8211; generator <= 1.0.1 versions.

Last activity 29 Oct 2026. Patch Forecast updates every hour.