CVE-2026-75834: Php Unverified File Cache Deserializationcve-2026-75834-php-unverified-file-cache-deserialization
Data read directly from a file or stream is deserialized without cryptographic integrity verification (such as HMAC via hash_hmac/hash_equals). This allows arbitrary PHP object injection if an attacker can tamper with or write cache files.