CVE-2026-71981 | cypht-org Cypht up to 2.12.1 Logout unserialize back_query deserialization

September 1, 2026 Yanac

A vulnerability identified as critical has been detected in cypht-org Cypht up to 2.12.1. Affected is the function unserialize of the component Logout Handler. The manipulation of the argument back_query leads to deserialization.

This vulnerability is uniquely identified as CVE-2026-71981. The attack is possible to be carried out remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More