Critical severity9.8NVD Advisory· Published Oct 28, 2016· Updated May 6, 2026

CVE-2016-8580

Description

PHP object injection vulnerabilities exist in multiple widget files in AlienVault OSSIM and USM before 5.3.2. These vulnerabilities allow arbitrary PHP code execution via magic methods in included classes.

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.alienvault.com/forums/discussion/7766/security-advisory-alienvault-5-3-2-address-70-vulnerabilitiesnvdVendor Advisory
www.securityfocus.com/bid/93864nvd
www.exploit-db.com/exploits/40682/nvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.010
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000