critical9.8
CVE-2026-62011
Unauthenticated PHP Object Injection in Bonbon <= 1.11 versions.
Impact
Unauthenticated PHP Object Injection in Bonbon <= 1.11 versions.
Affected products
| Product | Affected versions |
|---|---|
| Bonbon | through 1.11 |
Versions were read from the advisory text. No structured product data has been published for this record yet.