e107inc e107 up to 2.3.7 Deserialization core_functions.php e_array::unserialize user_prefs deserialization

Summaryinfo

A vulnerability was found in e107inc e107 up to 2.3.7. It has been declared as critical. This affects the function e_array::unserialize of the file e107_handlers/core_functions.php of the component Deserialization Handler. The manipulation of the argument user_prefs results in deserialization. This vulnerability is known as CVE-2026-57859. It is possible to launch the attack remotely. No exploit is available.

Detailsinfo

A vulnerability was found in e107inc e107 up to 2.3.7. It has been classified as critical. Affected is the function e_array::unserialize of the file e107_handlers/core_functions.php of the component Deserialization Handler. The manipulation of the argument user_prefs with an unknown input leads to a deserialization vulnerability. CWE is classifying the issue as CWE-502. The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid. This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes:

e107 prior to version 2.3.8 contains a code execution vulnerability in the e_array deserialization handler that allows an attacker with out-of-band database write access to execute arbitrary PHP code by storing a crafted payload in the user_prefs column. The e_array::unserialize() function in e107_handlers/core_functions.php performs only a prefix check for the string 'array' before passing the stored value to eval(), causing automatic PHP execution whenever the affected user's preferences are materialized through e_user_pref::load().

The advisory is available at github.com. This vulnerability is traded as CVE-2026-57859 since 06/25/2026. The exploitability is told to be easy. It is possible to launch the attack remotely. Technical details are known, but there is no available exploit.

By approaching the search of inurl:e107_handlers/core_functions.php it is possible to find vulnerable targets with Google Hacking.

Upgrading to version 2.3.8 eliminates this vulnerability.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Type

• Content Management System

Vendor

• e107inc

Name

• e107

Version

• 2.3.0
• 2.3.1
• 2.3.2
• 2.3.3
• 2.3.4
• 2.3.5
• 2.3.6
• 2.3.7

License

• open-source

Website

• Product: https://github.com/e107inc/e107/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion