← Volver al buscador de CVEs

CVE-2026-42472

MixPHP Framework

Descripción

Unsafe deserialization vulnerability in MixPHP Framework 2.x thru 2.2.17. The session and cache handlers use unserialize() on data from Redis in the RedisHandler object.

CVSS 9.8EPSS 0.38%Riesgo 1.01
Ver fuente
Publicación
2026-05-01 16:16:31
Versiones afectadas
<=2.2.17
Tipo
Package
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H