Is CVE-2026-49763 in the CISA Known Exploited Vulnerabilities catalog?

CVE-2026-49763 is not currently listed in the CISA KEV catalog.

Vulnerability intelligence

CVE-2026-49763: Contact Form 7 HubSpot remote code execution

CVE-2026-49763: unauthenticated PHP Object Injection in the CF7-HubSpot bridge. Neither vendor caught it.

CVSS 9.8 2026

What WebPulse reported · 1 analysis

CVE-2026-49763: unauthenticated PHP Object Injection in the CF7-HubSpot bridge. Neither vendor caught it.

Related vulnerabilities

CVE-2026-9082 CVE-2026-60137 CVE-2026-50549 CVE-2026-50548 CVE-2026-8206 CVE-2026-8181 CVE-2026-63030 CVE-2026-10795