CVE-2024-26289

CRITICAL 9.8CVE-2024-26289 · Published 27/05/2024 · updated 17/06/2026

In short

CVE-2024-26289 is a CRITICAL (CVSS 9.8) vulnerability affecting pmb (sigb).
Chance of exploitation in the next 30 days (EPSS): 0.61%, higher than 49.2% of all vulnerabilities.
Fix: update to 7.3.18, 7.4.9, 7.5.6-2 or later.

Package	Affected versions	Patched versions
pmb sigb	`≥ 7.3.1, < 7.3.18≥ 7.4.1, < 7.4.9≥ 7.5.1, < 7.5.6-2`	`7.3.187.4.97.5.6-2`

Description

Deserialization of Untrusted Data vulnerability in PMB Services PMB allows Remote Code Inclusion.This issue affects PMB: from 7.5.1 before 7.5.6-2, from 7.4.1 before 7.4.9, from 7.3.1 before 7.3.18.

References

forge.sigb.net/projects/pmb/files · Product
enisaeu/CNW · Third Party Advisory

More vulnerabilities in pmb

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

pmb

sigb

≥ 7.3.1, < 7.3.18≥ 7.4.1, < 7.4.9≥ 7.5.1, < 7.5.6-2

7.3.187.4.97.5.6-2

More vulnerabilities in pmb

See all →