CVE-2026-61998 Unauthenticated PHP Object Injection in Le Truffe <= 1.1.7 versions

Description

Unauthenticated PHP Object Injection in Le Truffe <= 1.1.7 versions.

Affected products and versions

Product	Affected versions	Fixed in
Le Truffe 1.1	earliest → 1.1.7	No fix stated

Other CVEs of Le Truffe

The 2 CVEs of Le Truffe →

CVE-2026-28069 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in… 8.1 High