CVE-2025-26921
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Mar 15, 2025
CWE ID 502
Summary
CVE-2025-26921 is a Deserialization of Untrusted Data vulnerability affecting the magepeopleteam Booking and Rental Manager. This issue permits Object Injection, which can be exploited by attackers to execute arbitrary code. The vulnerability impacts versions from n/a through 2.2.6 of the software. This weakness can lead to unauthorized access, data loss, or system compromise. Users are advised to update to the latest version of the software as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.