Linux Distros Unpatched Vulnerability : CVE-2026-119416

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CakePHP through 5.4.3 contains an improper cookie domain validation vulnerability in the Http Client CookieCollection that allows malicious servers to receive a...

cakephp-cookie-suffix

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · cakephp-cookie-suffix Write-up: https://abraxaslabs.tech/research/cakephp-cookie-suffix cakephp-cookie-suffix Class: Cookie leak / plant Reach: Remote CakePHP 5.4.2 887b641 - Cake Software Foundation...

CVE-2026-119416

CakePHP through 5.4.3 contains an improper cookie domain validation vulnerability in the Http Client CookieCollection that allows malicious servers to receive and plant cookies by abusing unanchored suffix matching. Attackers controlling a host such as one ending in a victim domain suffix, or...

CVE-2026-119416

CakePHP through 5.4.3 contains an improper cookie domain validation vulnerability in the Http Client CookieCollection that allows malicious servers to receive and plant cookies by abusing unanchored suffix matching. Attackers controlling a host such as one ending in a victim domain suffix, or...

CVE-2026-119416

CakePHP through 5.4.3 contains an improper cookie domain validation vulnerability in the Http Client CookieCollection that allows malicious servers to receive and plant cookies by abusing unanchored suffix matching. Attackers controlling a host such as one ending in a victim domain suffix, or...

CVE-2026-119416

CakePHP through 5.4.3 contains an improper cookie domain validation vulnerability in the Http Client CookieCollection that allows malicious servers to receive and plant cookies by abusing unanchored suffix matching. Attackers controlling a host such as one ending in a victim domain suffix, or...

EUVD-2026-113796

CakePHP through 5.4.3 contains an improper cookie domain validation vulnerability in the Http Client CookieCollection that allows malicious servers to receive and plant cookies by abusing unanchored suffix matching. Attackers controlling a host such as one ending in a victim domain suffix, or...

CVE-2026-119416 CakePHP through 5.4.3 Cookie Leakage via HTTP Client CookieCollection Domain Matching

CakePHP through 5.4.3 contains an improper cookie domain validation vulnerability in the Http Client CookieCollection that allows malicious servers to receive and plant cookies by abusing unanchored suffix matching. Attackers controlling a host such as one ending in a victim domain suffix, or...

CVE-2026-119416 CakePHP through 5.4.3 Cookie Leakage via HTTP Client CookieCollection Domain Matching

CakePHP through 5.4.3 contains an improper cookie domain validation vulnerability in the Http Client CookieCollection that allows malicious servers to receive and plant cookies by abusing unanchored suffix matching. Attackers controlling a host such as one ending in a victim domain suffix, or...

CVE-2026-119416

CakePHP versions through 5.4.3 are vulnerable to an improper cookie domain validation flaw in the Http Client CookieCollection component. The root cause is unanchored suffix matching , which allows malicious servers to abuse the Set-Cookie Domain attribute. Attackers controlling a host with a suf...

CVE-2026-119416: cakephp: CakePHP through 5.4.3 contains an improper cookie domain validation vulnerability in the Http Client CookieCollection…

CakePHP through 5.4.3 contains an improper cookie domain validation vulnerability in the Http Client CookieCollection that allows malicious servers to receive and plant cookies by abusing unanchored suffix matching. Attackers controlling a host such as one ending in a victim domain suffix, or...

PT-2026-133469

CakePHP through 5.4.3 contains an improper cookie domain validation vulnerability in the Http Client CookieCollection that allows malicious servers to receive and plant cookies by abusing unanchored suffix matching. Attackers controlling a host such as one ending in a victim domain suffix, or...