CVE-2024-23761: Gambio

Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days.

Server Side Template Injection in Gambio 4.9.2.0 allows attackers to run arbitrary code via crafted smarty email template.

Affected products

• Gambio Gambio: version 4.9.2.0 only

Published 2024-02-12. Last modified 2026-06-17.