← Database

CVE-2026-94075

CRITICAL CVSS: 9.8 Published: 2026-10-24 Modified: 2026-10-24

Description

Deserialization of Untrusted Data vulnerability in Tribulant Software Newsletters newsletters-lite allows Object Injection.This issue affects Newsletters: from n/a through 4.18.1.

Affected Platforms

Unknown

Weakness Type

CWE-502

References