← Back to browse · API

CVE-2024-44902

Severity

CRITICAL

CVSS

9.8

EPSS

0.04208

Risk score

40.67

CISA KEV

No

PoC

No

Published

2024-09-09

Modified

2026-07-05

First seen

2026-08-07

Aliases

EUVD-2024-2779, GHSA-F4WH-359G-4PQ7

Products

n/a:n/a n/a

Sources

euvd EUVD-2024-2779

Description

A deserialization vulnerability in Thinkphp v6.1.3 to v8.0.4 allows attackers to execute arbitrary code.

References