CVE-2026-118090

Published 30 October 2026 · tracked since 31 October 2026

Description

Subscriber PHP Object Injection in MasterStudy LMS <= 3.7.55 versions.

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-84172
• CVE-2026-84177
• CVE-2026-84231
• CVE-2026-87718
• CVE-2026-95863
• CVE-2026-82956
• CVE-2026-83539
• CVE-2026-83559
• CVE-2026-83594
• CVE-2026-84170

→ Open the live CVE board · all tools