Vulnerabilities CVE-2026-56095

CVE-2026-56095

High

Open

TLP:CLEAR

Insecure Deserialization in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

The extension's indexer passed every field value returned by content object rendering through PHP's unserialize() function when transferring multi-value data for the SOLR_CLASSIFICATION, SOLR_MULTIVALUE and SOLR_RELATION content object types, rather than a safe format. If user-generated content saved in the TYPO3 database can reach an indexed field, this exposes a PHP Object Injection surface.

Details

CVSS Score: 7.7
CVSS Vector: CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Confidence: 90%
Published: Aug 25, 2026
Last Modified: Aug 25, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.