Deserialización insegura en el plugin Magento 2 de TrueLayer
Insecure deserialization in the TrueLayer Magento 2 plugin Tue, 10/06/2026 - 10:47 Aviso Affected Resources TrueLayer Magento 2 Plugin, versions 2.4.0 through 2.4.2. Description INCIBE has coordinated the disclosure of a high-severity vulnerability affecting the TrueLayer Magento 2 Plugin, a payment integration plugin for Magento 2. The vulnerability, classified as insecure deserialization, could allow remote code execution by injecting specially crafted PHP objects into the cache backend used…
EPSS 0.00 CVSS 7.5 CVE-2026-103831 Magento TrueLayer ES