Skip to content
OpenAdvisories

Product · b2evolution

b2evolution CMS

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2026-76834

    b2evolution CMS 6.7.8 through 7.2.5 Object Injection via Negative Integer Array Key

    b2evolution CMS versions 6.7.8 through 7.2.5 contain an incomplete fix for CVE-2016-8901 where the serialized-array object check in param_check_serialized_array() fails to reject payloads with negative integer array keys. Unauthenticated attackers can submit …

    b2evolution b2evolution CMS