9.8
Critical
CVE-2026-119526 Deserialization of Untrusted Data vulnerability in ThemeREX Royal Event allows Object Injection
Description
Deserialization of Untrusted Data vulnerability in ThemeREX Royal Event allows Object Injection. This issue affects Royal Event: from n/a through 2.0.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Royal Event 2.0 | earliest → 2.0 | No fix stated |