CVE-2026-62120 Unauthenticated PHP Object Injection in Law Office <= 3.20 versions

Description

Unauthenticated PHP Object Injection in Law Office <= 3.20 versions.

Affected products and versions

Product	Affected versions	Fixed in
Law Office 3.20	earliest → 3.20	No fix stated

Other CVEs of Law Office

The 2 CVEs of Law Office →

CVE-2026-28046 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in… 8.1 High