CVE-2026-93957
Description
A flaw was found in olivier-ls PHP-FTS. This flaw, located in the SearchEngine::matchesSingleFilter function, is due to an incorrect comparison. A remote attacker could exploit this vulnerability to bypass filter matching, potentially leading to unauthorized information disclosure.
Statement
This vulnerability is rated as Moderate severity because an attacker requires authenticated access to execute queries, and successful exploitation only results in limited information disclosure without compromising system integrity or availability. The olivier-ls PHP-FTS library is not shipped or supported in Red Hat products. As a result, default Red Hat environments are not affected by this flaw.
Understanding the Weakness (CWE)
Other
Technical Impact: Varies by Context
This can lead to incorrect results and resultant weaknesses. For example, the code might inadvertently compare references to objects, instead of the relevant contents of those objects, causing two "equal" objects to be considered unequal.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
