PT-2026-6288 · Git+2 · Pearweb+1

Megamansec · Published 2026-02-03 · Updated 2026-02-03 · CVE-2026-25239

Positive Technologies (AI Summary)

CVSS v4.0

8.2

High

Base vector

AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions PEAR versions prior to 1.33.0

Description PEAR is a framework and distribution system for reusable PHP components. A SQL injection issue in the apidoc queue insertion allows for query manipulation if an attacker can influence the inserted filename value.

Recommendations Update to version 1.33.0.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2026-25239

GHSA-F9MG-X463-3VXG

Affected Products

Pearweb

Php Pear

References · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/25xxx/CVE-2026-25239.json · Exploit
• https://github.com/pear/pearweb/security/advisories/GHSA-f9mg-x463-3vxg · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-25239 · Security Note
• https://cve.org/CVERecord?id=CVE-2026-25239 · Security Note
• https://ubuntu.com/security/CVE-2026-25239 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-25239 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-25239 · Vendor Advisory