CRITICAL Published Oct 23, 2026

CVE-2026-112856

CVE-2026-112856 published: Deserialization of Untrusted Data vulnerability in ThemeREX Group Vagabonds vagabonds allows Object Injection.This issue affects Vagabonds: from n/a through 1.3.10.

View full NVD advisory → ← Back to CVE watch

CVE-2026-112856

Related reading