CVE-2026-42474

Name of the Vulnerable Software and Affected Versions MixPHP Framework versions 2.x through 2.2.17

Description An issue exists where a crafted data array passed to the data() function in BuildHelper.php can lead to SQL injection, a technique that allows an attacker to interfere with the queries that an application makes to its database.

Recommendations As a temporary workaround, restrict the use of the data() function in BuildHelper.php to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.