CVE-2026-54736 | Phalcon up to 5.14.0 HMAC Verifier decrypt day comparison

A vulnerability, which was classified as critical, was found in Phalcon up to 5.14.0. Affected by this vulnerability is the function decrypt of the component HMAC Verifier. The manipulation of the argument day results in incorrect comparison.

This vulnerability is reported as CVE-2026-54736. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More