CVE-2026-114403 | PHPOffice PHPPresentation up to 1.2.0 Presentation File PhpPresentation.xml IOFactory::load deserialization

October 21, 2026 Yanac

A vulnerability categorized as critical has been discovered in PHPOffice PHPPresentation up to 1.2.0. The affected element is the function IOFactory::load of the file PhpPresentation.xml of the component Presentation File Handler. The manipulation results in deserialization.

This vulnerability is reported as CVE-2026-114403. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More