🚨 CVE-2026-40754
Unauthenticated PHP Object Injection in Roisin <= 1.4 versions.