← Database

CVE-2026-42473

CRITICAL CVSS: 9.8 Published: 2026-05-01 Modified: 2026-06-17

Description

Unsafe deserialization vulnerability in MixPHP Framework 2.x thru 2.2.17. The session and cache handlers use unserialize() on data from the filesystem in the FileHandler object.

Affected Platforms

Unknown

Weakness Type

CWE-502

References