CVE-2026-113404
CVE-2026-113404 · Uniong｜WebITR - Insecure Deserialization
This page contains facts from public vulnerability sources. Check the original advisory before updating.
WebITR developed by Uniong has a Insecure Deserialization vulnerability. Authenticated remote attackers can use the hard-coded cryptographic key to craft and submit malicious serialized data, thereby executing arbitrary code on the server.
CVSS 8.7 · High · EPSS 0.4%
- Published
- Updated
Affected products and versions
webitr
- Versions
- ≥ 0, ≤ 2_1_0_34: Affected (custom)
No fix published