CVE-2026-114196 paytiumsupport CVE debrief

Who should care

Defenders responsible for the Paytium plugin, as well as security teams and administrators, should be aware of this vulnerability and take necessary actions to verify exposure and assess potential impact.

Why it matters

Defenders should prioritize verifying exposure and assessing potential impact due to the critical severity of this vulnerability, which allows for Object Injection. The CVE record and NVD detail page provide information on the vulnerability, but additional verification is required to determine the full scope of affected systems and potential impact.

• Potential for Object Injection due to deserialization of untrusted data.
• Critical severity of the vulnerability (CVSS Score: 9.8) requires immediate attention.
• Verification of exposure and potential impact is necessary to prevent potential security breaches.

Technical summary

The Paytium plugin has a Deserialization of Untrusted Data vulnerability, which allows for Object Injection. This issue affects versions from n/a through 5.0.5. The vulnerability has a critical severity, with a CVSS Score of 9.8, indicating a high risk of potential security breaches. The vulnerability can be exploited by deserializing untrusted data, which can lead to Object Injection. Defenders should prioritize verifying exposure and assessing potential impact due to the critical severity of this vulnerability. The CVE record and NVD detail page provide

Defensive priority

Defenders should prioritize verifying exposure and assessing potential impact due to the critical severity of this vulnerability.

Recommended defensive actions

• Verify exposure by checking if the Paytium plugin version is within the affected range (from n/a through 5.0.5).
• Assess potential impact by evaluating the critical severity of the vulnerability (CVSS Score: 9.8).
• Consider applying patches or mitigations provided by the vendor, if available.

Evidence notes

The CVE record and NVD detail page provide information on the vulnerability, but additional verification is required to determine the full scope of affected systems and potential impact.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.