CVE-2026-67399

Status: Received

Description

Deserialization of untrusted data in WHMCS 9.0.0 before 9.0.8 and 8.0.0 before 8.13.7 allows remote attackers to execute arbitrary code.

Published
September 14, 2026 9:17 PM
Last Modified
September 14, 2026 9:17 PM
Source
[email protected]

Weaknesses (CWE)

CWE-502

References

Contact Us

Get the CyboWatch SIEM platform, hosting, and 24×7 SOC analysts. Call or email us to get started.