Threat IntelFrankenPHP Authentication Bypass Flaw Disclosed (CVE-2026-128023)
CVE-2026-128023 in FrankenPHP (Authentication Bypass) allows remote attackers to trigger arbitrary code execution. Patch: Version 1.13.0 and later.
Topic
3 articles
CyberSecureToday covers FrankenPHP across 3 articles published between 14 Nov 2026 and 14 Nov 2026.
The coverage includes 3 vulnerability advisories. 3 advisories are rated critical or high severity.
Stories on FrankenPHP most often intersect with Vulnerability Analysis, Patch & Fix and Input Validation, with Technology, Cloud & SaaS the most affected sector. The most recent story, “FrankenPHP Authentication Bypass Flaw Disclosed (CVE-2026-128023)”, was published 14 Nov 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.
Threat IntelCVE-2026-128023 in FrankenPHP (Authentication Bypass) allows remote attackers to trigger arbitrary code execution. Patch: Version 1.13.0 and later.
Threat IntelCVE-2026-128014 in FrankenPHP standalone static binaries (Input Validation) allows remote attackers to trigger arbitrary code execution. Patch: Version 1.1
KubernetesCVE-2026-128027 in FrankenPHP Docker images (Input Validation) allows remote attackers to trigger arbitrary code execution. Patch: Version 1.1.11 and later