CVE-2026-118076
Contributor PHP Object Injection in Frisbii Pay <= 1.8.19 versions.
- Risk score
- 63/100
- CVSS
- 8.8 v3.1
- Published
- 29 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- A high-severity PHP Object Injection vulnerability exists in Frisbii Pay versions up to 1.8.19, allowing an attacker to potentially inject malicious PHP objects. This could lead to code execution and potentially severe consequences.
- Affected
- {'products': ['Frisbii Pay'], 'packages': [], 'versions': ['<= 1.8.19']}
- Fix
- Check the linked advisory for a fix, as none is provided in the record.
- Exploitation
- No known exploitation
Why it is Amber
- CVSS 8.8 high
- On your watchlist: php
References
Original description
Contributor PHP Object Injection in Frisbii Pay <= 1.8.19 versions.
Last activity 29 Oct 2026. Patch Forecast updates every hour.