Skip to content
OpenAdvisories

Vendor

cypht-org

3 known vulnerabilities.

Products

cypht 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-71981 Public exploit

    Cypht < 2.12.2 PHP Object Injection RCE via back_query Parameter

    Cypht before 2.12.2 contains a PHP object injection vulnerability that allows authenticated attackers to execute arbitrary operating system commands by supplying a crafted PHP object graph in the back_query GET parameter of the logout handler. Attackers can p…

    cypht-org cypht