CVE-2026-40759

HIGH

Unauthenticated PHP Object Injection in Esmée <= 1.4 versions.

StatusDeferred

설명

Unauthenticated PHP Object Injection in Esmée <= 1.4 versions.

Score Summary

CVSS Score: 8.1
Version: 3.1
VPI: 81
Why this VPI (explainable, experimental)
VPI breakdown
Impact 81.00
Exploitation signal(No additional exploitation signal) ×1.00
VPI 81.00
VPI formula vpi-v1
EPSS: 0.3%
(상위 24.1%)
Attack Vector: Network
High Complexity
No Privileges
No User Interaction
Scope Unchanged
High Confidentiality Impact
High Integrity Impact
High Availability Impact

Details

CWE Weakness Classification

References (1)

Impact	81.00
Exploitation signal(No additional exploitation signal)	×1.00
VPI	81.00