CVE-2026-39738 — Vulnerability intelligence

Aman — FunnelKit Automations

Published: 2026-10-30T18:30:34.923Z

CVSS

9.8

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

Deserialization of Untrusted Data vulnerability in Aman FunnelKit Automations wp-marketing-automations allows Object Injection.This issue affects FunnelKit Automations: from n/a through 3.8.6.1.

Sources

• CVE-2026-39738
• Original advisory
• CVE-2026-39738