CyberSecBulletin

Phpsysinfo vulnerabilities

We track 1 vulnerability in Phpsysinfo products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 28, 2026.

1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score

Latest Phpsysinfo vulnerabilities

  • 7.5 High severity

    phpsysinfo: Authentication Bypass by Spoofing

    CVE-2026-55584PhpsysinfoEPSS 1.91%

    phpSysInfo is a customizable PHP script that displays system information. Prior to 3.4.6, the PSI_ALLOWED access-control check in read_config.php trusts attacker-controlled X-Forwarded-For and Client-IP HTTP headers before REMOTE_ADDR. A remote unauthenticated