CVE-2026-62009 Unauthenticated PHP Object Injection in Filmax <= 1.1.11 versions

Description

Unauthenticated PHP Object Injection in Filmax <= 1.1.11 versions.

Affected products and versions

Product	Affected versions	Fixed in
Filmax 1.1	earliest → 1.1.11	No fix stated

Other CVEs of Filmax

The 2 CVEs of Filmax →

CVE-2026-28087 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in… 8.1 High