Description
Unauthenticated PHP Object Injection in Zoho Flow <= 2.14.5 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Zoho Flow | Zoho Flow | ≤ 2.14.5 | — |
Critical · 9.8
CVE-2026-62131
EUVD-2026-112982GHSA-6pvh-h9mv-qrhc
WordPress Zoho Flow plugin <= 2.14.5 - PHP Object Injection vulnerability
Published Oct 29, 2026 · Updated Oct 30, 2026 · Assigned by Patchstack