CVE-2026-55573 | e107inc e107 up to 2.3.6 Installer install.php unserialize previous_steps deserialization

October 14, 2026 Yanac

A vulnerability, which was classified as critical, has been found in e107inc e107 up to 2.3.6. This issue affects the function unserialize of the file install.php of the component Installer. The manipulation of the argument previous_steps leads to deserialization.

This vulnerability is documented as CVE-2026-55573. The attack can be initiated remotely. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More