IT Security
CVE-2026-49400 – PHP Object Injection in October CMS SessionMaker (Safe Mode)
A PHP object injection flaw in October CMS’s SessionMaker trait affects versions before 3.7.17 and 4.2.21 when Safe Mode is enabled. Updating… A PHP object injection flaw in October CMS’s SessionMaker trait affects versions before 3.7.17…