🚨 CVE-2026-40733
Unauthenticated PHP Object Injection in ShiftUp <= 1.3 versions.