{"items":[{"id":"CVE-2026-119419","published":"2026-10-30T11:30:50.862Z","updated":"2026-11-04T15:04:44.162Z","title":"CakePHP through 5.4.3 SQL Injection via StringExpression and IdentifierExpression Collation","severity":"CRITICAL","score":9.2,"vendor":"cakephp","product":"cakephp","kev":false,"epss":0.00394,"kevAdded":null},{"id":"CVE-2026-119418","published":"2026-10-30T11:30:50.158Z","updated":"2026-10-30T16:04:14.569Z","title":"CakePHP through 5.4.3 SQL Injection via WindowExpression range() and frame()","severity":"CRITICAL","score":9.2,"vendor":"cakephp","product":"cakephp","kev":false,"epss":0.0048,"kevAdded":null},{"id":"CVE-2026-119417","published":"2026-10-30T11:30:49.444Z","updated":"2026-10-30T15:55:41.693Z","title":"CakePHP through 5.4.3 Email Header Injection via Bare CR/LF in SmtpTransport and MailTransport","severity":"MEDIUM","score":6.3,"vendor":"cakephp","product":"cakephp","kev":false,"epss":0.00452,"kevAdded":null},{"id":"CVE-2026-119416","published":"2026-10-30T11:30:48.754Z","updated":"2026-11-05T21:13:26.654Z","title":"CakePHP through 5.4.3 Cookie Leakage via HTTP Client CookieCollection Domain Matching","severity":"MEDIUM","score":6.3,"vendor":"cakephp","product":"cakephp","kev":false,"epss":0.00175,"kevAdded":null},{"id":"CVE-2026-119415","published":"2026-10-30T11:30:48.078Z","updated":"2026-11-04T02:19:32.675Z","title":"CakePHP through 5.4.3 MIME Header Injection via FormDataPart Content-Type","severity":"MEDIUM","score":6.3,"vendor":"cakephp","product":"cakephp","kev":false,"epss":0.0037,"kevAdded":null},{"id":"CVE-2026-79752","published":"2026-09-17T14:49:56.936Z","updated":"2026-09-17T15:20:00.313Z","title":"CakePHP: Multiple methods in FunctionsBuilder vulnerable to SQL injection","severity":"CRITICAL","score":9.2,"vendor":"cakephp","product":"cakephp","kev":false,"epss":0.00621,"kevAdded":null},{"id":"CVE-2026-54713","published":"2026-08-27T17:03:31.580Z","updated":"2026-08-28T15:55:52.105Z","title":"CakePHP Queue: Incomplete Comparison in getUniqueId vulnerable to collisions","severity":"LOW","score":3.7,"vendor":"cakephp","product":"queue","kev":false,"epss":0.00461,"kevAdded":null},{"id":"CVE-2026-54614","published":"2026-08-26T15:30:23.966Z","updated":"2026-08-29T02:40:09.901Z","title":"DebugKit: MailPreview contains unsafe reflection","severity":"MEDIUM","score":4.3,"vendor":"cakephp","product":"debug_kit","kev":false,"epss":0.00536,"kevAdded":null},{"id":"CVE-2026-77337","published":"2026-08-24T21:30:06.817Z","updated":"2026-08-25T19:23:34.125Z","title":"CakePHP: Potential Authentication bypass with CookieAuthenticator","severity":"CRITICAL","score":9.1,"vendor":"cakephp","product":"authentication","kev":false,"epss":0.00698,"kevAdded":null},{"id":"CVE-2026-77634","published":"2026-08-24T20:33:46.836Z","updated":"2026-08-25T19:23:40.053Z","title":"CakePHP: SmtpTransport vulnerable to CRLF header injection","severity":"HIGH","score":8.2,"vendor":"cakephp","product":"cakephp","kev":false,"epss":0.00313,"kevAdded":null},{"id":"CVE-2026-77635","published":"2026-08-24T20:30:34.492Z","updated":"2026-08-25T13:31:40.225Z","title":"CakePHP: FunctionsBuilder::jsonValue() vulerable to SQL injection with PostgresDriver","severity":"CRITICAL","score":9.2,"vendor":"cakephp","product":"cakephp","kev":false,"epss":0.00493,"kevAdded":null},{"id":"CVE-2026-55590","published":"2026-07-09T18:55:30.241Z","updated":"2026-07-09T19:18:12.885Z","title":"CakePHP: Open redirect weakness via backslash bypass","severity":"MEDIUM","score":5.1,"vendor":"cakephp","product":"authentication","kev":false,"epss":0.00491,"kevAdded":null},{"id":"CVE-2026-48820","published":"2026-06-17T21:19:44.238Z","updated":"2026-06-18T13:54:12.069Z","title":"CakePHP: View::element() is missing a path containment check","severity":"MEDIUM","score":6.3,"vendor":"cakephp","product":"cakephp","kev":false,"epss":0.00258,"kevAdded":null},{"id":"CVE-2026-23643","published":"2026-01-16T20:38:45.170Z","updated":"2026-01-16T21:21:56.372Z","title":"CakePHP PaginatorHelper::limitControl() vulnerable to reflected cross-site-scripting","severity":"MEDIUM","score":5.4,"vendor":"cakephp","product":"cakephp","kev":false,"epss":0.00281,"kevAdded":null},{"id":"CVE-2023-22727","published":"2023-01-17T20:41:10.143Z","updated":"2025-03-10T21:22:35.657Z","title":"Database Query::offset() and limit() vulnerable to SQL injection in cakephp","severity":"CRITICAL","score":9.8,"vendor":"cakephp","product":"cakephp","kev":false,"epss":0.00898,"kevAdded":null}]}