Peter-Bosch

**Name of the Vulnerable Software and Affected Versions** phpVMS versions 7.x through 7.0.5 **Description** A critical issue in the legacy importer component allows unauthenticated access to a deprecated import feature. A remote attacker can trigger internal processes to modify or delete application data, which may lead to data loss or service disruption. **Recommendations** Update to version 7.0.6 or later. As a temporary workaround, comment out the routes associated with the legacy importer to disable access to the feature.