CVE-2026-108905 | pH7Software pH7Builder up to 18.5.x Tool.class.php hard-coded credentials

October 11, 2026 Yanac

A vulnerability was found in pH7Software pH7Builder up to 18.5.x. It has been declared as problematic. This vulnerability affects unknown code of the file Tool.class.php. Executing a manipulation can lead to hard-coded credentials.

This vulnerability is handled as CVE-2026-108905. The attack can be executed remotely. There is not any exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More