Login Request a demo
PE
Product
pearweb
by pear · last CVE Feb 3, 2026
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 7High 2Medium 0Low 0
Severity
All severities9Critical7High2Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add pearweb to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-25241
9.8
0%
Feb 3
PEAR is Vulnerable to SQL Injection in /get/<package>/<version> Endpoint
Affected: < 1.33.0
CVE-2026-25240
9.8
0%
Feb 3
PEAR is Vulnerable to SQL Injection in user::maintains() Role IN() Filter
Affected: < 1.33.0
CVE-2026-25238
9.8
0%
Feb 3
PEAR is Vulnerable to SQL Injection in Bug Subscription Deletion via Weak Email Validation
Affected: < 1.33.0
CVE-2026-25237
9.8
0%
Feb 3
PEAR is Vulnerable to PHP Code Execution via preg_replace /e in Bug Update Emails
Affected: < 1.33.0
CVE-2026-25236
9.8
0%
Feb 3
PEAR is Vulnerable to SQL Injection in Damblan_Karma IN() Query via Literal Substitution
Affected: < 1.33.0
CVE-2026-25234
9.8
0%
Feb 3
PEAR is Vulnerable to SQL Injection in Category Deletion
Affected: < 1.33.0
CVE-2026-25233
9.1
0%
Feb 3
PEAR Has a Roadmap Authorization Bypass via Operator Precedence Bug
Affected: < 1.33.0
CVE-2026-25239
7.5
0%
Feb 3
PEAR is Vulnerable to SQL Injection in apidoc_queue Insert via Unescaped Filename
Affected: < 1.33.0
CVE-2026-25235
7.5
0%
Feb 3
PEAR Has a Predictable Verification Hash in Election Account Requests
Affected: < 1.33.0
Showing 9