9.8
Critical
CVE-2026-27437 Deserialization of Untrusted Data vulnerability in ThemeREX Tennis Club tennis-sportclub allows Object Injection.This…
Description
Deserialization of Untrusted Data vulnerability in ThemeREX Tennis Club tennis-sportclub allows Object Injection.This issue affects Tennis Club: from n/a through <= 1.2.3.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Tennis Club 1.2 | earliest → 1.2.3 | No fix stated |