CVE-2026-66569 Unauthenticated PHP Object Injection in Kicker <= 2.2.1 versions

Description

Unauthenticated PHP Object Injection in Kicker <= 2.2.1 versions.

Affected products and versions

Product	Affected versions	Fixed in
Kicker 2.2	earliest → 2.2.1	No fix stated

Other CVEs of Kicker

The 2 CVEs of Kicker →

CVE-2025-60061 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in… 8.1 High