CVE-2026-93936

Summary

A critical deserialization vulnerability exists in IPharm versions through 1.2.4 that allows untrusted data to be deserialized, leading to potential object injection attacks. This flaw enables attackers to execute arbitrary code on the affected system.

Exploitability

Exploitation is relatively straightforward with no special preconditions required, as the vulnerability occurs during deserialization of untrusted input data.

Blast radius

The impact could be severe across all installations running IPharm versions through 1.2.4, potentially allowing full system compromise and data exfiltration.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to version 1.2.5 or later to remediate this vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.