critical9.8
CVE-2026-112856
Deserialization of Untrusted Data vulnerability in ThemeREX Group Vagabonds vagabonds allows Object Injection.This issue affects Vagabonds: from n/a through 1.…
Impact
Deserialization of Untrusted Data vulnerability in ThemeREX Group Vagabonds vagabonds allows Object Injection.This issue affects Vagabonds: from n/a through 1.3.10.
Affected products
| Product | Affected versions |
|---|---|
| Vagabonds: From N/A | through 1.3.10. |
Versions were read from the advisory text. No structured product data has been published for this record yet.