tastyigniter CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH tastyigniter CVE published 2026-10-21

CVE-2026-29001

CVE-2026-29001 is a PHP object injection vulnerability in TastyIgniter versions through 4.4.5. Authenticated administrators can submit a serialized PHP object as a settings value, which is stored unsanitized and later unserialized, allowing for arbitrary code execution. The impact persists until the value is overwritten. This vulnerability has a high CVSS score of 8.6 and is considered HIGH severity. The [truncated]