CVE-2026-62006 Unauthenticated PHP Object Injection in Nuts <= 1.12 versions

Description

Unauthenticated PHP Object Injection in Nuts <= 1.12 versions.

Affected products and versions

Product	Affected versions	Fixed in
Nuts 1.12	earliest → 1.12	No fix stated

Other CVEs of Nuts

The 2 CVEs of Nuts →

CVE-2026-28023 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in… 8.1 High