CVE-2026-66483 Unauthenticated PHP Object Injection in Education Center <= 3.6.12 versions

Description

Unauthenticated PHP Object Injection in Education Center <= 3.6.12 versions.

Affected products and versions

Product	Affected versions	Fixed in
Education Center 3.6	earliest → 3.6.12	No fix stated

Other CVEs of Education Center

The 2 CVEs of Education Center →

CVE-2026-94063 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeREX Education… 7.1 High