Known Vulnerabilities for Cakephp by Cakefoundation
Listed below are 6 of the newest known vulnerabilities associated with "Cakephp" by "Cakefoundation".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-77635 json | CakePHP is a rapid development framework for PHP. Prior to versions 5.1.10, 5.2.15, and 5.3.7 on their respective release lin... | Not Provided | 2026-08-24 | 2026-08-24 |
| CVE-2026-77634 json | CakePHP is a rapid development framework for PHP. Prior to versions 4.5.12, 4.6.5, 5.1.8, 5.2.14, and 5.3.7 on their respecti... | Not Provided | 2026-08-24 | 2026-08-24 |
| CVE-2026-77337 json | CakePHP Authentication is an authentication plugin for CakePHP that can also be used in PSR-7 based applications. Versions be... | Not Provided | 2026-08-24 | 2026-08-24 |
| CVE-2026-56422 json | Multiple MISP core controllers and model capture paths accepted client-controlled request fields such as primary keys (id) an... | Not Provided | 2026-06-22 | 2026-06-22 |
| CVE-2026-55590 json | CakePHP Authentication is an authentication plugin for CakePHP that can also be used in PSR-7 based applications. Prior to 2.... | Not Provided | 2026-07-09 | 2026-07-09 |
| CVE-2026-54360 json | A mass assignment vulnerability exists in MISP’s sharing group creation endpoint. When creating a new sharing group, the co... | Not Provided | 2026-06-12 | 2026-06-15 |
| CVE-2026-48820 json | CakePHP is a rapid development framework for PHP. In versions 4.5.11 and earlier, 4.6.0 through 4.6.3, 5.0.0 through 5.1.6, 5... | Not Provided | 2026-06-17 | 2026-06-18 |
| CVE-2020-35239 json | A vulnerability exists in CakePHP versions 4.0.x through 4.1.3. The CsrfProtectionMiddleware component allows method override... | 8.8 - HIGH | 2021-01-26 | 2021-02-02 |
| CVE-2020-15400 json | CakePHP before 4.0.6 mishandles CSRF token generation. This might be remotely exploitable in conjunction with XSS. | 4.3 - MEDIUM | 2020-06-30 | 2021-07-21 |
| CVE-2019-11458 json | An issue was discovered in SmtpTransport in CakePHP 3.7.6. An unserialized object with modified internal properties can trigg... | 7.5 - HIGH | 2019-05-08 | 2020-08-24 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Cakefoundation | Cakephp | 4.2.4 | |||
| Application | Cakefoundation | Cakephp | 4.2.3 | |||
| Application | Cakefoundation | Cakephp | 4.2.2 | |||
| Application | Cakefoundation | Cakephp | 4.2.1 | |||
| Application | Cakefoundation | Cakephp | 4.2.0 | |||
| Application | Cakefoundation | Cakephp | 4.2.0 | |||
| Application | Cakefoundation | Cakephp | 4.2.0 | |||
| Application | Cakefoundation | Cakephp | 4.1.7 | |||
| Application | Cakefoundation | Cakephp | 4.1.6 | |||
| Application | Cakefoundation | Cakephp | 4.1.5 | |||
| Application | Cakefoundation | Cakephp | 4.1.4 | |||
| Application | Cakefoundation | Cakephp | 4.1.3 | |||
| Application | Cakefoundation | Cakephp | 4.1.2 | |||
| Application | Cakefoundation | Cakephp | 4.1.1 | |||
| Application | Cakefoundation | Cakephp | 4.1.0 | |||
| Application | Cakefoundation | Cakephp | 4.1.0 | |||
| Application | Cakefoundation | Cakephp | 4.1.0 | |||
| Application | Cakefoundation | Cakephp | 4.1.0 | |||
| Application | Cakefoundation | Cakephp | 4.0.9 | |||
| Application | Cakefoundation | Cakephp | 4.0.8 |