EPSS 0.00
Deserialización insegura en el plugin Magento 2 de TrueLayer
Insecure deserialization in the TrueLayer Magento 2 plugin Tue, 10/06/2026 - 10:47 Aviso Affected Resources TrueLayer Magento 2 Plugin, versions 2.4.0 through 2.4.2. Description INCIBE has coordinated the disclosure of a high-severity vulnerability affecting the TrueLayer Magento 2 Plugin, a payment integration plugin for Magento 2. The vulnerability, classified as insecure deserialization, could allow remote code execution by injecting specially crafted PHP objects into the cache backend used…
CVE v události 1
| CVE | hodnocení | KEV | EPSS |
|---|---|---|---|
| CVE-2026-103831 | 7.5 4.0 · INCIBE | – | 0.00 |
Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 7.5.