CVE-2026-62054: Themerex Yacht Rental

Critical severity, CVSS 9.8.

Unauthenticated PHP Object Injection in Yacht Rental <= 2.6 versions.

Affected products

• Themerex Yacht Rental: up to and including 2.6

Published 2026-10-10. Last modified 2026-10-10.