CVE-2026-25233

Critical

PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, logic bug in the roadmap role check…

GitHub_M·CWE-783·Published 2026-02-03

CVSS

9.1

EPSS

0.00

KEV

Exploits

cve.orgen

247 chars

PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, logic bug in the roadmap role check allows non-lead maintainers to create, update, or delete roadmaps. This issue has been patched in version 1.33.0.

NVDen

247 chars

NVDes

304 chars

PEAR es un framework y sistema de distribución para componentes PHP reutilizables. Antes de la versión 1.33.0, un error lógico en la verificación de rol de hoja de ruta permite a los mantenedores no líderes crear, actualizar o eliminar hojas de ruta. Este problema ha sido parcheado en la versión 1.33.0.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	NVD	9.1	3.9	5.2	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
4.0	Primary	cve.org	7.1	—	—	CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
4.0	Primary	cve.org	7.1	—	—	CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
4.0	Secondary	NVD	7.1	—	—	CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X