[ Vendor · 5 CVEs ]
cakephp
CVEs affecting cakephp published in the last 30 days, plus any cakephp CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-119416 | 30 Oct 2026 | CVSS 4.8 | cakephpCakePHP through 5.4.3 contains an improper cookie domain validation vulnerability in the Http Client CookieCollection that allows malicious servers… | |
| CVE-2026-119417 | 30 Oct 2026 | CVSS 3.7 | cakephpCakePHP 4.5.12, 4.6.5, 5.1.8 through 5.1.10, 5.2.14 through 5.2.15, 5.3.7, and 5.4.0 through 5.4.3 contain an email header injection vulnerability… | |
| CVE-2026-119418 | 30 Oct 2026 | CVSS 8.1 | cakephpCakePHP through 5.4.3 contains an sql injection vulnerability that allows attackers to inject SQL by supplying unvalidated frame offsets and… | |
| CVE-2026-119419 | 30 Oct 2026 | CVSS 8.1 | cakephpCakePHP through 5.4.3 contains an sql injection vulnerability that allows attackers to inject SQL by supplying unvalidated collation values to… | |
| CVE-2026-119415 | 30 Oct 2026 | CVSS 3.7 | cakephpCakePHP through 5.4.3 contains a header injection vulnerability in FormDataPart that allows attackers to inject MIME part headers via unsanitized… |