CVE-2026-25240
Vulnerability
CVE-2026-25240
CVE-2026-25240
　PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection vulnerability can occur in user::maintains() when role filters are provided as an array and interpolated into an IN (...) clause. This issue has been patched in version 1.33.0.
References
- launchpad.net/ubuntu-cve-tracker: https://github.com/pear/pearweb/security/advisories/GHSA-xw9g-5gr2-c44f
- launchpad.net/ubuntu-cve-tracker: https://www.cve.org/CVERecord?id=CVE-2026-25240
severitym
medium
type: vendor
source: launchpad.net/ubuntu-cve-tracker
published: 2026-02-03 19:16:00
Detection
No detection criteria available for this vulnerability.
Data Sources
- Ubuntu CVE Tracker
ubuntu-cve-tracker
