Patch Forecast
Amber warning
Patch this week.

CVE-2026-118076

Contributor PHP Object Injection in Frisbii Pay <= 1.8.19 versions.

Risk score
63/100
CVSS
8.8 v3.1
Published
29 Oct 2026

Open in the live forecast Today's forecast

What to know

What it is
A high-severity PHP Object Injection vulnerability exists in Frisbii Pay versions up to 1.8.19, allowing an attacker to potentially inject malicious PHP objects. This could lead to code execution and potentially severe consequences.
Affected
{'products': ['Frisbii Pay'], 'packages': [], 'versions': ['<= 1.8.19']}
Fix
Check the linked advisory for a fix, as none is provided in the record.
Exploitation
No known exploitation

Why it is Amber

  • CVSS 8.8 high
  • On your watchlist: php

References

Original description

Contributor PHP Object Injection in Frisbii Pay <= 1.8.19 versions.

Last activity 29 Oct 2026. Patch Forecast updates every hour.