LIVE GLOBAL MONITOR: 1 JURISDICTION ACTIVE

Oct 19, 2026 · 15:05 UTC SEARCH

HACKCURRENT Cybersecurity Intelligence

CRITICAL

Vulnerability intelligence

CVE-2026-78286

Published September 3, 2026

CVSS 3.19.8

SeverityCritical

Known exploitedNo

Unauthenticated PHP Object Injection in Geo Controller <= 8.9.8 versions.

NVD references:

https://patchstack.com/database/wordpress/plugin/cf-geoplugin/vulnerability/wordpress-geo-controller-plugin-8-9-8-php-object-injection-vulnerability?_s_id=cve

Primary source: NIST National Vulnerability Database