PT-2026-54971

CVE-2026-27060

·

Published

2026-06-30

·

Updated

2026-08-03

Description by

CVSS 3.1
8.8
High
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions ARMember Premium versions prior to 7.6
Description Deserialization of untrusted data in the software allows Object Injection, a technique where an attacker can manipulate serialized objects to execute arbitrary code or interfere with application logic.
Recommendations Update ARMember Premium to version 7.6 or later.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-502: Deserialization of Untrusted Data
Related identifiers
CVE-2026-27060
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com