← All advisories

Critical severity9.8NVD Advisory· Published Oct 29, 2026· Updated Oct 29, 2026

CVE-2026-62131

CVE-2026-62131

Description

Unauthenticated PHP Object Injection in Zoho Flow <= 2.14.5 versions.

Patches

Vulnerability mechanics

References

1

patchstack.com/database/wordpress/plugin/zoho-flow/vulnerability/wordpress-zoho-flow-plugin-2-14-5-php-object-injection-vulnerabilitynvd

News mentions

0

No linked articles in our index yet.