CVE WATCH / VULNERABILITY DETAIL
CVE-2026-115190
HIGHCVSS 8NVD feed
Published 26 October 2026 · tracked since 26 October 2026
Description
An insecure deserialization (PHP object injection) vulnerability exists in Mautic's handling of segment filters and custom field properties. Several code paths that read these stored values from the database deserialize them without restricting which PHP classes may be instantiated, instead of using
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-77055
- CVE-2026-115930 MEDIUM 6.8
- CVE-2026-112345 HIGH 8.1
- CVE-2026-110733 MEDIUM 5.4
- CVE-2026-110748
- CVE-2026-106781
- CVE-2026-59107 CRITICAL 9.8
- CVE-2026-116487 MEDIUM 4.6
- CVE-2026-116488 MEDIUM 6.8
- CVE-2026-116516 MEDIUM 6.5