PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-62107 masteriyo CVE debrief

Unauthenticated PHP Object Injection vulnerability in Masteriyo - LMS plugin versions up to 3.4.0. The CVE record was published on 2026-09-11T19:17:43.583Z and has not been modified since then.

Vendor
masteriyo
Product
Masteriyo - LMS
CVSS
HIGH 8.8
CISA KEV
Not listed in stored evidence
Original CVE published
2026-09-11
Original CVE updated
2026-09-11
Advisory published
2026-09-11
Advisory updated
2026-09-11

Who should care

Defenders responsible for Masteriyo - LMS plugin installations should verify exposure and assess potential impacts.

Why it matters

Defenders should prioritize verifying exposure of Masteriyo - LMS plugin versions up to 3.4.0 and assessing potential impacts of Unauthenticated PHP Object Injection.

  • Potential for Unauthenticated PHP Object Injection
  • Possible impact on confidentiality, integrity, and availability
  • Verification of affected versions required

Technical summary

The Masteriyo - LMS plugin versions up to 3.4.0 contain an Unauthenticated PHP Object Injection vulnerability. The CVE record and NVD entry provide limited information about the vulnerability.

Defensive priority

Defenders should prioritize verifying exposure of Masteriyo - LMS plugin versions up to 3.4.0 and assessing potential impacts.

Recommended defensive actions

  • Verify Masteriyo - LMS plugin versions up to 3.4.0 are not in use
  • Assess potential impacts of Unauthenticated PHP Object Injection
  • Consider upgrading to a patched version if available

Evidence notes

The CVE record and NVD entry provide limited information about the vulnerability. Further verification is required to determine affected versions and potential impacts.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-62107 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-62107

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-62107 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-62107

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.