← Retour à la recherche de CVE

CVE-2026-42472

MixPHP Framework

Description

Unsafe deserialization vulnerability in MixPHP Framework 2.x thru 2.2.17. The session and cache handlers use unserialize() on data from Redis in the RedisHandler object.

CVSS 9.8EPSS 0.38%Risque 1.01
Voir la source
Publication
2026-05-01 16:16:31
Versions concernées
<=2.2.17
Type
Package
Vecteur
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H