CVE Catalog
CVE-2026-49075
CriticalCVSS 9.8Summary
JetEngine versions up to 3.8.9.1 are vulnerable to PHP Object Injection, which may lead to unauthorized access to data.
Risk Assessment
Organizations using vulnerable versions may be exposed to attacks that could result in the disclosure of sensitive information or system takeover.
Recommendation
It is recommended to update JetEngine to the latest version to mitigate this vulnerability.
Original NVD description (English source)
Contributor PHP Object Injection in JetEngine <= 3.8.9.1 versions.