VendorsPHPfrankenphpall versions
Vulnerabilities

PHP FrankenPHP

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2026-24895
FrankenPHP affected by Path Confusion via Unicode casing in CGI path splitting allows execution of arbitrary files
Published 2026-02-12 · Analyzed
9.8EPSS 0.006
CVE-2026-24894
FrankenPHP leaks session data between requests in worker mode
Published 2026-02-12 · Analyzed
8.7EPSS 0.004