CVE-2026-94676
Received Received - Intake

Deserialization of Untrusted Data in Tainacan

Publication date: 2026-10-10

Last updated on: 2026-10-10

Assigner: Patchstack

Description
Deserialization of Untrusted Data vulnerability in Tainacan Community Tainacan tainacan allows Object Injection.This issue affects Tainacan: from n/a through 1.3.0.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-10
Last Modified
2026-10-10
Generated
2026-10-10
AI Q&A
2026-10-10
EPSS Evaluated
N/A
NVD
CVE-2026-94676
EUVD
EUVD-2026-96323

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Tainacan Community Tainacan 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-502 The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-94676 is a PHP Object Injection vulnerability in the Tainacan WordPress plugin versions 1.3.0 and below. It allows attackers to inject malicious objects during deserialization, potentially leading to unauthorized data manipulation or server control.

Detection Guidance

Detecting this vulnerability requires checking if the Tainacan plugin version 1.3.0 or below is installed. Inspect WordPress installations for the plugin and verify its version. Use commands like 'wp plugin list' in WP-CLI or check the plugin directory for version details.

Impact Analysis

This vulnerability could allow attackers to execute harmful actions on your server, such as unauthorized data access, modification, or deletion. It may also enable mass exploitation campaigns targeting multiple websites using the vulnerable plugin.

Mitigation Strategies

Immediately update the Tainacan plugin to version 1.4.0 or later. If updating is not possible, apply Patchstack's mitigation rule to block attacks. Contact your hosting provider or developer for assistance if needed.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-94676. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart