Phalcon

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 3
    Known Exploited: 0
    0
    Critical Level Threats
    0
    High Level Threats
    0
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-59989

    Phalcon Volt compiler `join` filter compile-time PHP code injection (SSTI lead to RCE)

    Last Modified: Aug 27, 2026
    Published: Aug 21, 2026

    CVE-2026-57584

    Phalcon: Catastrophic backtracking (ReDoS) in the default Phalcon Router route lead to remote unauthenticated DoS

    Last Modified: Jul 13, 2026
    Published: Jul 10, 2026

    CVE-2026-54736

    Phalcon: Non-constant-time HMAC verification in `Encryption\Crypt::decrypt` (timing side-channel)

    Last Modified: Jul 13, 2026
    Published: Jul 10, 2026
    Items Per Page
    Phalcon Vulnerabilities & Security CVEs | CVE-DB