php2shell-check

php2shell-check Find every PHP install vulnerable to PHP2Sh...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell Check websites and servers for PHP2Shell CVE-2026...

PT-2026-118086

FrankenPHP: Cross-request PHP session ID leak in worker mode when the session extension is a shared module in github.com/dunglas/frankenphp...

EUVD-2026-98911

FrankenPHP: Cross-request PHP session ID leak in worker mode when the session extension is a shared module...

FrankenPHP: Cross-request PHP session ID leak in worker mode when the session extension is a shared module

Summary In worker mode under concurrency, FrankenPHP can hand a PHP session id from one request to another when PHP's session extension is loaded as a shared module instead of being statically linked into the FrankenPHP binary. A request presenting Cookie: session=A can have sessionid resolve to ...

GHSA-V3PH-CGQH-R8P5 FrankenPHP: Cross-request PHP session ID leak in worker mode when the session extension is a shared module

Summary In worker mode under concurrency, FrankenPHP can hand a PHP session id from one request to another when PHP's session extension is loaded as a shared module instead of being statically linked into the FrankenPHP binary. A request presenting Cookie: session=A can have sessionid resolve to ...

CVE-2026-82416

FrankenPHP is a modern application server for PHP. Prior to 1.12.5, FrankenPHP worker mode can retain PHP session state between requests when the session extension is loaded as a shared module and is unavailable through HAVEPHPSESSION at compile time. In this build configuration,...

CVE-2026-85733

FrankenPHP is a modern application server for PHP. Prior to 1.12.5, the official FrankenPHP Debian and Alpine Docker images include a default /app/public/index.php that executes phpinfo. A derived image that does not overwrite this placeholder serves the diagnostics page in production and can...

EUVD-2026-98915

FrankenPHP is a modern application server for PHP. Prior to 1.12.5, the official FrankenPHP Debian and Alpine Docker images include a default /app/public/index.php that executes phpinfo. A derived image that does not overwrite this placeholder serves the diagnostics page in production and can...

CVE-2026-85733 FrankenPHP: Docker images serve phpinfo() as the default index.php, leaking environment variables

FrankenPHP is a modern application server for PHP. Prior to 1.12.5, the official FrankenPHP Debian and Alpine Docker images include a default /app/public/index.php that executes phpinfo. A derived image that does not overwrite this placeholder serves the diagnostics page in production and can...

CVE-2026-85733

FrankenPHP is a modern application server for PHP. Prior to 1.12.5, the official FrankenPHP Debian and Alpine Docker images include a default /app/public/index.php that executes phpinfo. A derived image that does not overwrite this placeholder serves the diagnostics page in production and can...

CVE-2026-85733 FrankenPHP: Docker images serve phpinfo() as the default index.php, leaking environment variables

FrankenPHP is a modern application server for PHP. Prior to 1.12.5, the official FrankenPHP Debian and Alpine Docker images include a default /app/public/index.php that executes phpinfo. A derived image that does not overwrite this placeholder serves the diagnostics page in production and can...

CVE-2026-85733 FrankenPHP: Docker images serve phpinfo() as the default index.php, leaking environment variables

FrankenPHP is a modern application server for PHP. Prior to 1.12.5, the official FrankenPHP Debian and Alpine Docker images include a default /app/public/index.php that executes phpinfo. A derived image that does not overwrite this placeholder serves the diagnostics page in production and can...

CVE-2026-85733

Official FrankenPHP Debian and Alpine Docker images prior to version 1.12.5 contain a default /app/public/index.php file that executes phpinfo(). If a derived image does not overwrite this placeholder, it can be accessed in production, leading to the exposure of sensitive information such as envi...

CVE-2026-82416 FrankenPHP: Cross-request PHP session ID leak in worker mode when the session extension is a shared module

FrankenPHP is a modern application server for PHP. Prior to 1.12.5, FrankenPHP worker mode can retain PHP session state between requests when the session extension is loaded as a shared module and is unavailable through HAVEPHPSESSION at compile time. In this build configuration,...

CVE-2026-82416

FrankenPHP versions prior to 1.12.5 are vulnerable to a cross-request PHP session ID leak in worker mode. The root cause occurs when the session extension is loaded as a shared module and is unavailable through HAVE_PHP_SESSION at compile time, causing frankenphp_reset_session_state() to be omitt...

CVE-2026-82416 FrankenPHP: Cross-request PHP session ID leak in worker mode when the session extension is a shared module

FrankenPHP is a modern application server for PHP. Prior to 1.12.5, FrankenPHP worker mode can retain PHP session state between requests when the session extension is loaded as a shared module and is unavailable through HAVEPHPSESSION at compile time. In this build configuration,...

CVE-2026-82416 FrankenPHP: Cross-request PHP session ID leak in worker mode when the session extension is a shared module

FrankenPHP is a modern application server for PHP. Prior to 1.12.5, FrankenPHP worker mode can retain PHP session state between requests when the session extension is loaded as a shared module and is unavailable through HAVEPHPSESSION at compile time. In this build configuration,...

CVE-2026-82416

FrankenPHP is a modern application server for PHP. Prior to 1.12.5, FrankenPHP worker mode can retain PHP session state between requests when the session extension is loaded as a shared module and is unavailable through HAVEPHPSESSION at compile time. In this build configuration,...

PT-2026-111732

Name of the Vulnerable Software and Affected Versions FrankenPHP versions prior to 1.12.5 Description In worker mode, the application server may retain PHP session state between requests when the session extension is loaded as a shared module and is unavailable through HAVE PHP SESSION at compile...