CVE-2026-55634
1 advisory.
Packagist/pimcore/pimcore CVE-2026-55634: critical 9.9, EPSS 0.65%
Pimcore Vulnerable to Remote Code Execution via DataObject Class-Definition Field Name
Action: Upgrade pimcore/pimcore to 12.3.10 or later.
composer require pimcore/pimcore:12.3.10composer require pimcore/pimcore:2026.1.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 12.3.10 | - |
| 2026.1.0 | 2026.1.6 | - |
Fixed versions
| 12.3.10 | 2026.1.6 |
Sources
- osv: GHSA-9x44-4gxf-8c25
- https://github.com/pimcore/pimcore/security/advisories/GHSA-9x44-4gxf-8c25
- https://github.com/pimcore/pimcore/pull/19183
- https://github.com/pimcore/pimcore/commit/a4f8c3cfee58b7d5fe4873d67782eff58dae9b9d
- https://github.com/pimcore/pimcore
- https://github.com/pimcore/pimcore/releases/tag/v2026.1.6
CVE-2026-55634 · published · modified · JSON