CyberSecBulletin

Zumba vulnerabilities

We track 1 vulnerability in Zumba products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on February 21, 2026.

1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score

Latest Zumba vulnerabilities

  • 8.1 High severity

    json-serializer: Deserialization of Untrusted Data

    CVE-2026-27206Zumba

    Zumba Json Serializer is a library to serialize PHP variables in JSON format. In versions 3.2.2 and below, the library allows deserialization of PHP objects from JSON using a special @type field. The deserializer instantiates any class specified in the @type f