CVE Catalog
CVE-2026-54194
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.53%
40th percentile — higher than 40% of all known CVEs
Summary
Fusion Builder versions up to 3.15.4 are vulnerable to PHP Object Injection, which may lead to unauthorized access or data manipulation.
Risk Assessment
Organizations using vulnerable versions may be exposed to attacks that could result in data loss or security breaches.
Recommendation
It is recommended to update Fusion Builder to the latest version to mitigate this vulnerability.
Original NVD description (English source)
Contributor PHP Object Injection in Fusion Builder <= 3.15.4 versions.