CVE-2026-109396 | Thelia up to 3.1.1/3.2.0 CSVSerializer injection

October 12, 2026 Yanac

A vulnerability labeled as critical has been found in Thelia up to 3.1.1/3.2.0. The affected element is an unknown function of the component CSVSerializer. Such manipulation leads to injection.

This vulnerability is uniquely identified as CVE-2026-109396. The attack can be launched remotely. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More