CVE-2026-19906 in pkp-lib信息

预测

由 VulDB Data Team • 2026-08-14

有一个漏洞被发现于pkp pkp-lib 3.3.0/3.4.0/3.5.0。此漏洞会影响功能 setData文件classes/user/form/APIProfileForm.php的组件API Key Generation。在参数apiKey被操纵的情况下，会引发弱加密。远程可以启动攻击，该补丁名为529b5df878e571ccc727647f7748eafc1466b041。建议修补漏洞以消除此问题。

If you want to get best quality of vulnerability data, you may have to visit VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

负责

VulDB

管理

已接受

条目

VDB-390119

CPE

准备好

CWE

CWE-331 (已确认)

CVSS

3.7 (VulDB)

EPSS

0.00000

KEV

否

活动

低

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2026-19906
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-19906
CVE Details	https://www.cvedetails.com/cve/CVE-2026-19906/

◂ 上一步一览下一步 ▸

Want to know what is going to be exploited?

We predict KEV entries!