CVE-2026-73389

The Kalles Addons versions up to 1.0.6 are vulnerable to unauthenticated PHP Object Injection, allowing attackers to exploit this flaw to execute arbitrary code on the server. This critical vulnerability poses a significant risk to any system utilizing the affected add-ons, potentially leading to unauthorized access and data compromise. Organizations using Kalles Addons should prioritize immediate remediation to mitigate the risk of exploitation.