[CVE-2026-93931] Deserialization of Untrusted Data vulnerability in ThemeREX Group Smash smash allows Object Injectio…

Descripción técnica

Deserialization of Untrusted Data vulnerability in ThemeREX Group Smash smash allows Object Injection.This issue affects Smash: from n/a through 1.12.0.

Puntuación CVSS

Score: 9.8/10 — Severidad: CRITICAL — Estado NIST: Received

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Debilidades (CWE)

CWE-502

Fuente oficial

Publicado en NIST NVD.