What’s Vulnerable › Products

php frankenphp vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your php frankenphp version is affected

Latest php frankenphp vulnerabilities

• CVE-2026-85733 — FrankenPHP: Docker images serve phpinfo() as the default index.php, leaking environment variables (CVSS 5.3)
• CVE-2026-82416 — FrankenPHP: Cross-request PHP session ID leak in worker mode when the session extension is a shared module (CVSS 7.7)
• CVE-2026-45062 — FrankenPHP: Unsafe Unicode Handling in CGI Path Splitting Allows Execution of Non-PHP Files (CVSS 8.1)
• CVE-2026-24895 — FrankenPHP affected by Path Confusion via Unicode casing in CGI path splitting allows execution of arbitrary files (CVSS 9.8)
• CVE-2026-24894 — FrankenPHP leaks session data between requests in worker mode (CVSS 7.5)