PT-2026-109782 · Unknown · Dynamic User Directory

CVE-2026-42719

·

Published

2026-10-10

·

Updated

2026-10-10

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Dynamic User Directory versions 2.4 and earlier
Description An issue involving PHP Object Injection occurs due to the deserialization of untrusted data.
Recommendations Update Dynamic User Directory to a version later than 2.4.

Fix

Deserialization of Untrusted Data

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2026-42719

Affected Products

Dynamic User Directory