Paytium (N/a - 5.0.5) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/paytium-n/a---5.0.5/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioSat, 24 Oct 2026 14:16:53 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgPaytium: Deserialization of untrusted data (CVE-2026-114196)https://feed.craftedsignal.io/briefs/2026-10-paytium-deserialization/Sat, 24 Oct 2026 14:16:53 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-paytium-deserialization/Paytium versions from n/a through 5.0.5 contain a Deserialization of Untrusted Data vulnerability that allows for Object Injection.<p>CVE-2026-114196 identifies a Deserialization of Untrusted Data vulnerability in the paytiumsupport Paytium plugin. This issue allows for Object Injection and affects versions from n/a through 5.0.5. The vulnerability has a CVSS v3.1 base score of 9.8.</p> criticaladvisory