CVE-2026-62131

Description

Unauthenticated PHP Object Injection in Zoho Flow <= 2.14.5 versions.

References

• www.cve.org/CVERecord ↗
• nvd.nist.gov/vuln/detail/CVE-2026-62131 ↗
• patchstack.com/database/wordpress/plugin/zoho-flow/vulnerability/wordpress-zoho-flow-plugin-2-14-5-php-object-injection-vulnerability ↗

Related CVEs

• CVE-2026-90861Progress Software / WS_FTP ServerCVSS 6.6
• CVE-2026-84296Progress Software / WS_FTP ServerCVSS 6.8
• CVE-2026-84295Progress Software / WS_FTP ServerCVSS 10.0
• CVE-2026-84294Progress Software / WS_FTP ServerCVSS 7.7
• CVE-2026-62018ThemeREX / GunslingerCVSS 9.8
• CVE-2026-62017ThemeREX / Good HomesCVSS 9.8
• CVE-2026-62016ThemeREX / GamicCVSS 9.8
• CVE-2026-62015ThemeREX / GamezoneCVSS 9.8