Critical (9.8) in phpmemcachedadmin project phpmemcachedadmin. EPSS 12% chance of exploitation in the next 30 days.
PHPMemcachedAdmin 1.2.2 and earlier allows remote attackers to execute arbitrary PHP code via vectors related "serialized data and the last part of the concatenated filename," which creates a file in webroot.
Severity
CVSS 3.0
9.8 critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
12% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)