CVE-2026-82226

Unauthenticated PHP Object Injection in Tickera <= 3.6.0.2 versions.

Published Aug 31, 2026
CVSS 9.8 critical
0.6% chance of exploitation in the next 30 days (EPSS)

Affected software

Tickera

CVE-2026-82226 at the National Vulnerability Database