CVE-2026-108904 | pH7Software pH7Builder up to 18.4.x UserController UserController::users information disclosure

October 11, 2026 Yanac

A vulnerability marked as problematic has been reported in pH7Software pH7Builder up to 18.4.x. This affects the function UserController::users of the component UserController. Performing a manipulation results in information disclosure.

This vulnerability is identified as CVE-2026-108904. The attack can be initiated remotely. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More