CVE-2026-97865

7.3 HIGHpublic exploit available

Published 2026-09-25 · Updated 2026-09-28

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

A security flaw has been discovered in Open-Web-Analytics up to 1.8.1. Affected is the function Event::loadFromArray of the file queue.php of the component Remote Event Queue Endpoint. Performing a manipulation results in deserialization. The attack can be initiated remotely. Upgrading to version 1.8.2 is able to address this issue. The patch is named 78c1222ec0e2119d84684032da1541120a2cdd23. The affected component should be upgraded.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Weaknesses

CWE-20, CWE-502

Public exploit & PoC references

https://github.com/Open-Web-Analytics/Open-Web-Analytics/
https://github.com/Open-Web-Analytics/Open-Web-Analytics/commit/78c1222ec0e2119d84684032da1541120a2cdd23
https://github.com/Open-Web-Analytics/Open-Web-Analytics/issues/960
https://github.com/Open-Web-Analytics/Open-Web-Analytics/pull/967
https://github.com/Open-Web-Analytics/Open-Web-Analytics/releases/tag/1.8.2

All references

https://github.com/Open-Web-Analytics/Open-Web-Analytics/
https://github.com/Open-Web-Analytics/Open-Web-Analytics/commit/78c1222ec0e2119d84684032da1541120a2cdd23
https://github.com/Open-Web-Analytics/Open-Web-Analytics/issues/960
https://github.com/Open-Web-Analytics/Open-Web-Analytics/pull/967
https://github.com/Open-Web-Analytics/Open-Web-Analytics/releases/tag/1.8.2
https://vuldb.com/cve/CVE-2026-97865
https://vuldb.com/submit/911108
https://vuldb.com/vuln/409882
https://vuldb.com/vuln/409882/cti

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

MEDIUMCVE-2026-94091PoC
MEDIUMCVE-2026-94092PoC
MEDIUMCVE-2026-94093PoC
MEDIUMCVE-2026-95897PoC
MEDIUMCVE-2026-95928PoC
MEDIUMCVE-2026-97869PoC
MEDIUMCVE-2025-32000
CRITICALCVE-2025-59953PoC

Related by shared AI tags and CWE weakness class. Browse the full archive.