CVE-2026-65575

Deferred Deferred - Pending Action

Unauthenticated PHP Object Injection in Accalia

Publication date: 2026-08-06

Last updated on: 2026-08-12

Assigner: Patchstack

Description

Unauthenticated PHP Object Injection in Accalia <= 1.5.3 versions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-06

Last Modified

2026-08-12

Generated

2026-08-26

AI Q&A

2026-08-06

EPSS Evaluated

2026-08-25

NVD

CVE-2026-65575

EUVD

EUVD-2026-53993

Affected Vendors & Products

Vendor	Product	Version / Range
patchstack	accalia	to 1.5.3 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-502	The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.

Attack-Flow Graph

Executive Summary

This is an unauthenticated PHP Object Injection vulnerability affecting Accalia versions 1.5.3 and below. It allows remote attackers to inject malicious PHP objects without authentication, potentially leading to code execution or other attacks.

Detection Guidance

Detecting this vulnerability requires checking for the Accalia theme version 1.5.3 or below. Inspect WordPress installations for the Accalia theme files and verify the version. No specific commands are provided in the context, but monitoring for unusual activity or unauthorized access attempts may indicate exploitation.

Impact Analysis

An attacker could exploit this to execute arbitrary code on your server, gain unauthorized access, steal sensitive data, or disrupt services. The high CVSS score (9.8) indicates severe impact.

Compliance Impact

This vulnerability could lead to data breaches, violating GDPR (data protection) and HIPAA (health data privacy). Non-compliance may result in fines, legal penalties, and reputational damage.

Mitigation Strategies

Update Accalia to the latest version (1.5.4 or higher) to patch the PHP Object Injection vulnerability. If an update is not available, consider disabling or removing the software until a patch is released.

Hi! I’m here to help you understand CVE-2026-65575. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70