Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2026-97865

Open-Web-Analytics Remote Event Queue Endpoint queue.php loadFromArray deserialization

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulDB

Description

A security flaw has been discovered in Open-Web-Analytics up to 1.8.1. Affected is the function Event::loadFromArray of the file queue.php of the component Remote Event Queue Endpoint. Performing a manipulation results in deserialization. The attack can be initiated remotely. Upgrading to version 1.8.2 is able to address this issue. The patch is named 78c1222ec0e2119d84684032da1541120a2cdd23. The affected component should be upgraded.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a Open-Web-Analytics

  • 1.8.0affected
  • 1.8.1affected
  • 1.8.2unaffected

References