Patch Forecast
Amber warning
Patch this week.

CVE-2026-118080

Contributor PHP Object Injection in Social Snap <= 1.5.4 versions.

Risk score
63/100
CVSS
8.8 v3.1
Published
29 Oct 2026

Open in the live forecast Today's forecast

What to know

What it is
A PHP Object Injection vulnerability exists in Social Snap versions up to 1.5.4, allowing an attacker to potentially inject malicious PHP code. This could lead to arbitrary code execution, data tampering, and system compromise.
Affected
{'products': ['Social Snap'], 'packages': [], 'versions': ['<= 1.5.4']}
Fix
Check the linked advisory for a fix, as none is provided.
Exploitation
No known exploitation

Why it is Amber

  • CVSS 8.8 high
  • On your watchlist: php

References

Original description

Contributor PHP Object Injection in Social Snap <= 1.5.4 versions.

Last activity 29 Oct 2026. Patch Forecast updates every hour.