Category

php

2 articles

CVE‑2025‑14179 & CVE‑2026‑6722: PHP PDO Firebird / SOAP Injection Deep Dive

Background The recent surge in critical PHP vulnerabilities underscores a troubling trend: supply-chain and framework-level flaws are increasingly being weaponized before they can be patched or even fully analyzed. CVE-2025-14179 exemplifies this, with its 9.8 CVSS score reflecting the severity of unauthenticated SQL injection via PDO Firebird’s handling

Edgerunner Edgerunner 5 min read