CVE-2026-73993

FundEngine versions up to 1.7.9 are vulnerable to unauthenticated PHP Object Injection, allowing attackers to exploit this flaw to execute arbitrary code on the server. This critical vulnerability poses a significant risk to any organization using affected versions, as it can lead to full system compromise. Organizations utilizing FundEngine should prioritize immediate patching or mitigation strategies to safeguard their systems.