CVE-2026-62008 Unauthenticated PHP Object Injection in Orpheus <= 1.8 versions

Description

Unauthenticated PHP Object Injection in Orpheus <= 1.8 versions.

Affected products and versions

Product	Affected versions	Fixed in
Orpheus 1.8	earliest → 1.8	No fix stated

Other CVEs of Orpheus

The 2 CVEs of Orpheus →

CVE-2025-69171 Unauthenticated Local File Inclusion in Orpheus <= 1.3 versions 8.1 High