CVE-2026-66563 Unauthenticated PHP Object Injection in Windsor <= 2.10 versions

Description

Unauthenticated PHP Object Injection in Windsor <= 2.10 versions.

Affected products and versions

Product	Affected versions	Fixed in
Windsor 2.10	earliest → 2.10	No fix stated

Other CVEs of Windsor

The 2 CVEs of Windsor →

CVE-2026-28081 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in… 8.1 High