CVE-2026-39797: DATA443 Risk Mitigation, Inc Gdpr Framework By DATA443

Critical severity, CVSS 9.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Unauthenticated PHP Object Injection in GDPR Framework By Data443 <= 2.5.0 versions.

Affected products

• DATA443 Risk Mitigation, Inc Gdpr Framework By DATA443: up to and including 2.5.0

Published 2026-10-06. Last modified 2026-10-06.