{"action":"Upgrade pimcore/pimcore to 12.3.10 or later.","affected":[{"fixed":"12.3.10","introduced":"0"},{"fixed":"2026.1.6","introduced":"2026.1.0"}],"component":"pimcore/pimcore","cve_ids":["CVE-2026-55634"],"ecosystem":"Packagist","epss":0.0065,"exploited":false,"fixed_versions":["12.3.10","2026.1.6"],"ghsa_id":"GHSA-9x44-4gxf-8c25","id":"tcs_01M5KF0D3R7F010V1FJD8C2A6S","modified_at":"2026-08-29T11:55:52.607777113Z","published_at":"2026-08-28T19:17:42Z","references":["https://osv.dev/vulnerability/GHSA-9x44-4gxf-8c25","https://github.com/pimcore/pimcore/security/advisories/GHSA-9x44-4gxf-8c25","https://github.com/pimcore/pimcore/pull/19183","https://github.com/pimcore/pimcore/commit/a4f8c3cfee58b7d5fe4873d67782eff58dae9b9d","https://github.com/pimcore/pimcore","https://github.com/pimcore/pimcore/releases/tag/v2026.1.6"],"severity":{"label":"critical","score":9.9},"sources":[{"source":"osv","source_id":"GHSA-9x44-4gxf-8c25","url":"https://osv.dev/vulnerability/GHSA-9x44-4gxf-8c25"}],"summary":"Pimcore Vulnerable to Remote Code Execution via DataObject Class-Definition Field Name"}