CVE-2026-77138 Blast Radius

CRITICAL • CVSS 9.3The extension fails to safely process untrusted client input of an attacker-controlled cookie directly to PHP's unserialize(). A remote, unauthenticat…

Is Your Infrastructure Using These Packages?

EchelonGraph automatically scans your cloud infrastructure and SBOMs to map your exposure to vulnerabilities like CVE-2026-77138.

Start Free Scan →← Back to CVE-2026-77138