CVE-2026-122233Low· 3.7▾ SunlitFrankenPHP before 1.13.4 contains an information disclosure vulnerability in worker mode that fails to clear last HTTP stream response headers between requests, because the reset only happens in RSHUTDOWN, which worker requests skip. Lat…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 20.4 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Nov 6.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.2%
FrankenPHP before 1.13.4 contains an information disclosure vulnerability in worker mode that fails to clear last HTTP stream response headers between requests, because the reset only happens in RSHUTDOWN, which worker requests skip. Later requests calling http_get_last_response_headers() can read headers fetched by earlier requests on the same worker thread, exposing other users' Set-Cookie or token headers from backend APIs.
frankenphp < 1.13.4Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-82416High· 7.7FrankenPHP is a modern application server for PHP
CVE-2026-85733Medium· 5.3FrankenPHP is a modern application server for PHP
CVE-2024-5148High· 7.5Gnome-remote-desktop: inadequate validation of session agents using d-bus methods may expose rdp tls certificate
CVE-2026-121966High· 8.7Traefik before 2.11.60 and 3.7.16 ForwardAuth NTLM/Negotiate Identity Leak
CVE-2026-120634NoneCGI::Carp versions before 5.00 for Perl leak warnings across requests in persistent environments via the warningsToBrowser buffer
CVE-2026-115419High· 8.1Unintended disclosure of data element to wrong session in Strands Agents SDK A2A Server