CVE-2026-73389

CriticalCVSS 9.8

Published: 19/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Summary

Unauthenticated PHP Object Injection in Kalles Addons <= 1.0.6 versions.

An attacker can inject malicious PHP objects, potentially leading to code execution or data integrity breaches.

Upgrade Kalles Addons to a version newer than 1.0.6, which includes a fix for this vulnerability.

Original NVD description (English source)

Unauthenticated PHP Object Injection in Kalles Addons <= 1.0.6 versions.