CVE-2026-49107

CriticalCVSS 9.8

Published: 17/06/2026(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Summary

Thrive Apprentice versions below 10.8.10.2 are vulnerable to unauthenticated PHP object injection.

An attacker could exploit this vulnerability to perform unauthorized actions within the system, potentially leading to serious security breaches.

It is recommended to update Thrive Apprentice to version 10.8.10.2 or later to mitigate this vulnerability.

Original NVD description (English source)

Unauthenticated PHP Object Injection in Thrive Apprentice < 10.8.10.2 versions.