<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: pearweb</title><description>Every new CVE for pearweb.</description><link>https://agentprime.io/</link><item><title>CVE-2026-25241: PEAR is Vulnerable to SQL Injection in /get/&lt;package&gt;/&lt;version&gt; Endpoint</title><link>https://agentprime.io/advisories/CVE-2026-25241/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-25241/</guid><description>CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 03 Feb 2026 18:31:17 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-25240: PEAR is Vulnerable to SQL Injection in user::maintains() Role IN() Filter</title><link>https://agentprime.io/advisories/CVE-2026-25240/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-25240/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 03 Feb 2026 18:31:01 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-25239: PEAR is Vulnerable to SQL Injection in apidoc_queue Insert via Unescaped Filename</title><link>https://agentprime.io/advisories/CVE-2026-25239/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-25239/</guid><description>CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 03 Feb 2026 18:30:53 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-25238: PEAR is Vulnerable to SQL Injection in Bug Subscription Deletion via Weak Email Validation</title><link>https://agentprime.io/advisories/CVE-2026-25238/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-25238/</guid><description>CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 03 Feb 2026 18:30:14 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-25237: PEAR is Vulnerable to PHP Code Execution via preg_replace /e in Bug Update Emails</title><link>https://agentprime.io/advisories/CVE-2026-25237/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-25237/</guid><description>CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 03 Feb 2026 18:29:54 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-25236: PEAR is Vulnerable to SQL Injection in Damblan_Karma IN() Query via Literal Substitution</title><link>https://agentprime.io/advisories/CVE-2026-25236/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-25236/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 03 Feb 2026 18:29:46 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-25235: PEAR Has a Predictable Verification Hash in Election Account Requests</title><link>https://agentprime.io/advisories/CVE-2026-25235/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-25235/</guid><description>CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 03 Feb 2026 18:29:39 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-25234: PEAR is Vulnerable to SQL Injection in Category Deletion</title><link>https://agentprime.io/advisories/CVE-2026-25234/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-25234/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 03 Feb 2026 18:29:19 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-25233: PEAR Has a Roadmap Authorization Bypass via Operator Precedence Bug</title><link>https://agentprime.io/advisories/CVE-2026-25233/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-25233/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 03 Feb 2026 18:29:13 GMT</pubDate><category>CVE</category></item></channel></rss>