CVE-2026-25236
Vulnerability
CVE-2026-25236
CVE-2026-25236
　PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection risk exists in karma queries due to unsafe literal substitution for an IN (...) list. This issue has been patched in version 1.33.0.
References
- launchpad.net/ubuntu-cve-tracker: https://github.com/pear/pearweb/security/advisories/GHSA-95mc-p966-c29f
- launchpad.net/ubuntu-cve-tracker: https://www.cve.org/CVERecord?id=CVE-2026-25236
severitym
medium
type: vendor
source: launchpad.net/ubuntu-cve-tracker
published: 2026-02-03 19:16:00
Detection
No detection criteria available for this vulnerability.
Data Sources
- Ubuntu CVE Tracker
ubuntu-cve-tracker
