Openmix Mix Php — known CVE vulnerabilities

Every CVE whose affected-product data names Openmix Mix Php, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2026-37552 — CVSS 8.4 (high): Unsafe deserialization vulnerability in MixPHP Framework 2.x thru 2.2.17. The sync-invoke TCP server (Server.php:87) receives data from a…
• CVE-2026-42475 — CVSS 6.5 (medium): SQL injection vulnerability in MixPHP Framework 2.x thru 2.2.17 via crafted `on` array to the joinOn function in BuildHelper.php.