CVE-2026-55599

phpseclib is a PHP secure communications library. From 0.1.1 until 1.0.30, 2.0.55, and 3.0.54, when an application validates an untrusted X.509 certificate with phpseclib, X509::validateSignature() reads a URL out of that certificate's Authority Information Access (AIA) extension and connects to it. Attacker who supplies certificate fully controls host, port, and path of that connection. URL fetching is enabled by default, and no destination is blocked. An unauthenticated attacker can therefore make a validating server open connections to internal hosts and ports it should never reach, for example loopback 127.0.0.1, cloud metadata address 169.254.169.254, and internal-only services. This is a server-side request forgery (SSRF) caused by an insecure default. This vulnerability is fixed in 1.0.30, 2.0.55, and 3.0.54.

• CWE-918

• https://github.com/phpseclib/phpseclib/security/advisories/GHSA-m557-wrgg-6rp4Exploit, Mitigation, Vendor Advisory
• https://github.com/phpseclib/phpseclib/security/advisories/GHSA-m557-wrgg-6rp4Exploit, Mitigation, Vendor Advisory

Published

Jun 22, 2026

Last Modified

Jun 26, 2026

Status

Analyzed

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-55590CakePHP Authentication is an authentication plugin for CakeP…6.1
• CVE-2026-55592Dashy is a self-hostable personal dashboard. Prior to 4.3.7,…3.9
• CVE-2026-55594ImageMagick is free and open-source software used for editin…5.3
• CVE-2026-55595ImageMagick is free and open-source software used for editin…4.7
• CVE-2026-55596Plate is a rich-text editor with AI and shadcn/ui. From 53.0…8.7
• CVE-2026-55597ImageMagick is free and open-source software used for editin…5.5
• CVE-2026-5560A vulnerability was found in PHPGurukul Online Shopping Port…6.3
• CVE-2026-55602http-proxy-middleware is node.js http-proxy middleware. From…8.6
• CVE-2026-55603http-proxy-middleware is node.js http-proxy middleware. From…7.5
• CVE-2026-55604DeepSeek MCP Server is an MCP server for DeepSeek V4. Starti…8.6
• CVE-2026-55605DeepSeek MCP Server is an MCP server for DeepSeek V4. Starti…5.3
• CVE-2026-55607Claude Code is an agentic coding tool. From 2.1.38 until 2.…8.8