Beveiligingsadvies

CVE-2026-24894

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-02-12 19:12:04

Laatst bijgewerkt 2026-02-12 20:04:57

Toegewezen door GitHub_M

CVSS-score 8.7

Status PUBLISHED

Beschrijving

FrankenPHP is a modern application server for PHP. Prior to 1.11.2, when running FrankenPHP in worker mode, the $_SESSION superglobal is not correctly reset between requests. This allows a subsequent request processed by the same worker to access the $_SESSION data of the previous request (potentially belonging to a different user) before session_start() is called. This vulnerability is fixed in 1.11.2.

← Alle CVE's bekijken Bekijk op cve.org ↗