CVE-2026-92932

Name of the Vulnerable Software and Affected Versions sachertortephp (affected versions not specified)

Description A logic error exists in the Xml::build() static method within the lib/Cake/Utility/Xml.php file. The issue stems from incorrect operator precedence in a conditional statement intended to control network-based XML fetching. Specifically, the expression evaluates the https:// check independently of the readFile option. Consequently, if an attacker controls the input parameter, they can force the application to perform an outbound HTTPS request via HttpSocket even when the readFile option is set to false. This leads to Server-Side Request Forgery (SSRF), potentially allowing information disclosure from internal services or external targets by parsing the fetched response as XML.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict user-controlled input from reaching the input parameter of the Xml::build() function.