CVE-2026-97284

Summary

This flaw allows for PHP object injection, enabling attackers to execute arbitrary code. It matters because it can lead to full system compromise.

Exploitability

Exploitation requires access to the affected Icegram version and the ability to inject malicious PHP objects. Precondition is the use of an unpatched version <= 3.1.31.

Blast radius

If exploited, the impact could be severe, leading to full compromise of the system and potential data exfiltration or destruction.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Icegram 3.1.32 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.