CVE-2026-62107

The vulnerability allows unauthenticated PHP Object Injection in Masteriyo Learning Management System versions up to 3.4.0, potentially enabling attackers to execute arbitrary code or manipulate application behavior. Organizations using this LMS should prioritize patching or mitigating this issue due to its high severity and the risk of unauthorized access or data compromise. Immediate action is recommended for any educational institutions or businesses relying on this platform for online learning.