9.8
Critical
CVE-2026-23542 Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Object…
Description
Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Object Injection.This issue affects Grand Restaurant: from n/a through <= 7.0.10.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Grand Restaurant 7.0 | earliest → 7.0.10 | No fix stated |
Other CVEs of Grand Restaurant
The 8 CVEs of Grand Restaurant →
CVE-2026-94161
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Grand…
7.1
High
CVE-2025-67922
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Grand…
7.1
High
CVE-2025-32926
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ThemeGoods Grand…
9.8
Critical
CVE-2025-39348
Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Object…
9.8
Critical