AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2009-2626

MEDIUM · CVSS 6.4 EPSS 8.31%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2009-12-01 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 6.4. See the original NVD description below for full technical details.

CVE
CVE-2009-2626
Severity
MEDIUM
CVSS
6.4
EPSS
8.31%

Original NVD Description

The zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain sensitive information (memory contents) and cause a PHP crash by using the ini_set function to declare a variable, then using the ini_restore function to restore the variable.