CVE-2019-19826

score

<0.1

cvss

9.8

epss

1.8%

published

2019-12-16

kev added

—

first seen

2026-10-21

Drupal Views Dynamic Fields module through 7.x-1.0-alpha4 contains an insecure unserialize caused by unsafe unserialize calls in handlers/views_handler_filter_dynamic_fields.inc, involving PHP object injection with field_names and Archive_Tar objects, letting attackers execute arbitrary code or delete files, exploit requires crafted unserialize data.