CVE-2026-54856 Unauthenticated PHP Object Injection in RexCoin <= 1.2.6 versions

Description

Unauthenticated PHP Object Injection in RexCoin <= 1.2.6 versions.

Affected products and versions

Product	Affected versions	Fixed in
RexCoin 1.2	earliest → 1.2.6	No fix stated

Other CVEs of RexCoin

The 2 CVEs of RexCoin →

CVE-2026-28094 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in… 8.1 High