CVE-2026-97865Published
Open-Web-Analytics Remote Event Queue Endpoint queue.php loadFromArray deserialization
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-97865 · Microsoft / collected KEV context
cve-program · CVE-2026-97865
- https://vuldb.com/vuln/409882
- https://vuldb.com/vuln/409882/cti
- https://vuldb.com/cve/CVE-2026-97865
- https://vuldb.com/submit/911108
- https://github.com/Open-Web-Analytics/Open-Web-Analytics/issues/960
- https://github.com/Open-Web-Analytics/Open-Web-Analytics/pull/967
- https://github.com/Open-Web-Analytics/Open-Web-Analytics/commit/78c1222ec0e2119d84684032da1541120a2cdd23
- https://github.com/Open-Web-Analytics/Open-Web-Analytics/releases/tag/1.8.2
- https://github.com/Open-Web-Analytics/Open-Web-Analytics/
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.