Object Injection

Everything Patch Observer has reported about Object Injection: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

Managed Service Providers Urged to Patch Critical itthinx Affiliates Deserialization Vulnerability

A critical deserialization vulnerability in itthinx Affiliates versions up to 7.0.1 allows object injection, requiring immediate attention for managed service providers.

Oct 14, 2026

Vulnerabilities

Critical Deserialization Flaw in Smart Casa Exposes Orgs to Remote Object Injection via CVE-2026-93932

A critical deserialization vulnerability in ThemeREX Group Smart Casa allows remote object injection, requiring immediate attention for users on versions up to 1.0.12.

Oct 10, 2026