Ppear

Products

Exploited and recent CVEs

• CVE-2026-25241 Critical 9.3 PEAR is Vulnerable to SQL Injection in /get/<package>/<version> Endpoint 0.4%
• CVE-2026-25240 Medium 6.9 PEAR is Vulnerable to SQL Injection in user::maintains() Role IN() Filter 0.3%
• CVE-2026-25239 High 8.2 PEAR is Vulnerable to SQL Injection in apidoc_queue Insert via Unescaped Filename 0.2%
• CVE-2026-25238 Critical 9.2 PEAR is Vulnerable to SQL Injection in Bug Subscription Deletion via Weak Email Validation 0.3%
• CVE-2026-25237 Critical 9.2 PEAR is Vulnerable to PHP Code Execution via preg_replace /e in Bug Update Emails 0.5%
• CVE-2026-25236 Medium 6.9 PEAR is Vulnerable to SQL Injection in Damblan_Karma IN() Query via Literal Substitution 0.3%
• CVE-2026-25235 High 8.2 PEAR Has a Predictable Verification Hash in Election Account Requests 0.3%
• CVE-2026-25234 Medium 5.3 PEAR is Vulnerable to SQL Injection in Category Deletion 0.3%
• CVE-2026-25233 High 7.1 PEAR Has a Roadmap Authorization Bypass via Operator Precedence Bug 0.4%