CVE-2026-78531

Published 10 October 2026 · tracked since 11 October 2026

Description

Unauthenticated PHP Object Injection in Jacqueline <= 2.22 versions.

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-108605 MEDIUM 4.3
• CVE-2026-108606 MEDIUM 5.4
• CVE-2026-108607 MEDIUM 4.3
• CVE-2026-108608 MEDIUM 4.3
• CVE-2026-108609 MEDIUM 4.3
• CVE-2026-78533 CRITICAL 9.8
• CVE-2026-78535 CRITICAL 9.8
• CVE-2026-81797 CRITICAL 9.8
• CVE-2026-66567 CRITICAL 9.8
• CVE-2026-66568 CRITICAL 9.8

→ Open the live CVE board · all tools