A deserialization vulnerability in LimeSurvey before v6.15.0+250623 allows a remote attacker to execute arbitrary code on the server.

Published Mar 10, 2026 · Updated Jul 5, 2026 · Assigned by mitre