All security reports
NVD security advisoryCritical

Critical advisory for Unauthenticated PHP Object Injection in

CVE-2026-62131 · Reported 29 Oct 2026

Full advisory details, affected packages, severity context, and original source.

Affected technology

Unauthenticated PHP Object Injection inPHP ecosystem

Advisory overview

Unauthenticated PHP Object Injection in Zoho Flow <= 2.14.5 versions.

Related references

Your vulnerabilities. One clear dashboard.

Find and review known vulnerabilities across your applications and infrastructure in one dashboard, so your team can see what needs attention and take action to fix it.

Create your account