What’s Vulnerable › Products

pearweb vulnerabilities

9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 9 published in the last 12 months.

Check whether your pearweb version is affected

Latest pearweb vulnerabilities

• CVE-2026-25241 — PEAR is Vulnerable to SQL Injection in /get/<package>/<version> Endpoint (CVSS 9.8)
• CVE-2026-25240 — PEAR is Vulnerable to SQL Injection in user::maintains() Role IN() Filter (CVSS 9.8)
• CVE-2026-25239 — PEAR is Vulnerable to SQL Injection in apidoc_queue Insert via Unescaped Filename (CVSS 7.5)
• CVE-2026-25238 — PEAR is Vulnerable to SQL Injection in Bug Subscription Deletion via Weak Email Validation (CVSS 9.8)
• CVE-2026-25237 — PEAR is Vulnerable to PHP Code Execution via preg_replace /e in Bug Update Emails (CVSS 9.8)
• CVE-2026-25236 — PEAR is Vulnerable to SQL Injection in Damblan_Karma IN() Query via Literal Substitution (CVSS 9.8)
• CVE-2026-25235 — PEAR Has a Predictable Verification Hash in Election Account Requests (CVSS 7.5)
• CVE-2026-25234 — PEAR is Vulnerable to SQL Injection in Category Deletion (CVSS 9.8)
• CVE-2026-25233 — PEAR Has a Roadmap Authorization Bypass via Operator Precedence Bug (CVSS 9.1)