VDB

GCVE-110-COMPOSER-2026-039019

GCVE-110-COMPOSER-2026-039019
Advisory Published
Vulnetix · Advisory published July 5, 2026
[PHP-SHELL-EXEC-VAR] PHP OS command execution sink invoked on a variable — matched: )) && ($sReply = curl_exec($this->_hSocket)) !== false)) {

Weaknesses (CWE)

CWE-506Embedded Malicious Code

Affected Products

VendorProductVersionsPlatforms
packagistnikolai-zaharchuk/apns-php* (affected)

References

advisory
web
web

Browse GCVE Records

73,053 records in the GCVE database · Updated July 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›