CVE-2026-42723: Ancorathemes Cleanskin

Critical severity, CVSS 9.8.

Unauthenticated PHP Object Injection in CleanSkin <= 1.5.0 versions.

Affected products

• Ancorathemes Cleanskin: up to and including 1.5.0

Published 2026-10-10. Last modified 2026-10-10.