Skip to content
CVE PROGRAM SOURCE RECORD9.4 Critical

CVE-2026-42569

phpvms: /importer authorization bypass causing full database wipe

Description

phpVMS is a PHP application to run and simulate an airline. Prior to version 7.0.6, a critical vulnerability in phpVMS allowed unauthenticated access to a legacy import feature. This issue has been patched in version 7.0.6.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

phpvms phpvms

  • < 7.0.6affected

References