← Back to search

CVE-2026-94076

8.8 HIGH

Published 2026-09-30 · Updated 2026-09-30

AI risk analysis

Summary
This flaw allows for PHP object injection, which can lead to arbitrary code execution. It matters because attackers can exploit it to gain control over the system.
Exploitability
Exploitation requires access to the affected plugin version and knowledge of the injection point, making it moderately difficult.
Blast radius
If exploited, the impact could be severe, as it allows for full system compromise.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
Upgrade to Squirrly SEO version 14.2.6 or later.
rcewebphpcode-execution

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

Contributor PHP Object Injection in SEO Plugin by Squirrly SEO <= 14.2.5 versions.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-502

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.