CVE-2026-62011 Unauthenticated PHP Object Injection in Bonbon <= 1.11 versions

Description

Unauthenticated PHP Object Injection in Bonbon <= 1.11 versions.

Affected products and versions

Product	Affected versions	Fixed in
Bonbon 1.11	earliest → 1.11	No fix stated

Other CVEs of Bonbon

The 2 CVEs of Bonbon →

CVE-2026-28030 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in… 8.1 High