CVE-2026-62107

Unauthenticated PHP Object Injection in Masteriyo - LMS <= 3.4.0 versions.

• Published Sep 11, 2026
• CVSS 8.8 high
• 0.5% chance of exploitation in the next 30 days (EPSS)

CVE-2026-62107 at the National Vulnerability Database