CVE-2026-97246

Subscriber PHP Object Injection in ShortPixel Image Optimizer <= 6.5.5 versions.

• Published Sep 30, 2026
• CVSS 4.9 medium
• 0.2% chance of exploitation in the next 30 days (EPSS)

CVE-2026-97246 at the National Vulnerability Database