Vulnerabilities
Remote attackers execute code on Equadio 1.1.4 via unauthenticated PHP injection CVE-2026-62087
A severe vulnerability in Equadio versions up to 1.1.4 allows remote attackers to execute arbitrary code without authentication.
ThemeREX
Everything TechSec Observer has reported about ThemeREX: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
NVD Assigns 9.8 Score to ThemeREX Dwell Deserialization Weakness Enabling Object Injection
A deserialization weakness in ThemeREX Group Dwell allows object injection, rated 9.8 CVSS by the NVD for versions through 1.16.0.