Live › vulnerability › CVE-2026-62004
Motorix versions 1.11 and earlier accept attacker-supplied serialized PHP data without authentication. Exploitation can allow an attacker to inject PHP objects, which may lead to code execution depending on available gadget chains.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 16:26 UTC. All times on this page are UTC.
No product ranges from the sources yet.
1.11 (the sources do not state a fixed version)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Unauthenticated PHP Object Injection in Motorix <= 1.11 versions.
This page as .md · .json · in your agent: get_signal("CVE-2026-62004")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.