deserialization

Everything TechSec Feed has reported about deserialization: 2 stories, newest first. Part of our Vulnerabilities coverage.

14 Oct
Vulnerabilities

e107 CMS Users Urged to Update to 2.3.7 After Critical Unauthenticated RCE Vulnerability Discovered

A critical vulnerability in e107 CMS versions prior to 2.3.7 allows attackers to execute arbitrary code via the install.php script, risking full server compromise.

10 Oct
Vulnerabilities

ThemeREX Greeny Deserialization Bug CVE-2026-93940 Forces Patch for Versions Up to 2.10.0

A critical deserialization flaw in the Greeny WordPress theme allows object injection, impacting all versions up to 2.10.0 with a high severity score.