Vendor
Uniong WebITR contains an insecure deserialization vulnerability, CVE-2026-113404, allowing authenticated remote attackers to execute arbitrary code via malicious serialized data.