CVE-2026-118080
Contributor PHP Object Injection in Social Snap <= 1.5.4 versions.
- Risk score
- 63/100
- CVSS
- 8.8 v3.1
- Published
- 29 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- A PHP Object Injection vulnerability exists in Social Snap versions up to 1.5.4, allowing an attacker to potentially inject malicious PHP code. This could lead to arbitrary code execution, data tampering, and system compromise.
- Affected
- {'products': ['Social Snap'], 'packages': [], 'versions': ['<= 1.5.4']}
- Fix
- Check the linked advisory for a fix, as none is provided.
- Exploitation
- No known exploitation
Why it is Amber
- CVSS 8.8 high
- On your watchlist: php
References
Original description
Contributor PHP Object Injection in Social Snap <= 1.5.4 versions.
Last activity 29 Oct 2026. Patch Forecast updates every hour.