CVE-2026-42569 Details.
phpVMS < 7.0.6 - Legacy Importer Authorization Bypass
Atlas does not check this one. Works by exploiting the flaw.
The only reliable test for this one is to try the weakness itself, which can disturb the site. Atlas does not do that, so it does not run this check.
About CVE-2026-42569. What It Means.
phpVMS < 7.0.6 contains an authentication bypass caused by unauthenticated access to a legacy import feature, letting unauthenticated attackers access restricted functionality, exploit requires no special privileges.
Affected Product. What Is Hit.
- Vendor
- phpvms
- Product
- phpVMS
FAQ
Common Questions.
phpVMS < 7.0.6 - Legacy Importer Authorization Bypass. phpVMS < 7.0.6 contains an authentication bypass caused by unauthenticated access to a legacy import feature, letting unauthenticated attackers access restricted functionality, exploit requires no special privileges.
No. The only reliable test for this one is to try the weakness itself, which can disturb the site. Atlas does not do that, so it does not run this check. The facts about CVE-2026-42569 are on this page, and you can request a demo to see how Brandefense watches your whole external attack surface.
CVE-2026-42569 is not on the CISA Known Exploited Vulnerabilities list at the time of writing, but it is still worth fixing.
Update phpVMS to the latest version from the vendor, or follow the vendor's advice to switch off the affected feature. Vendor links are listed on this page when they are known.
This page lists the public facts about CVE-2026-42569. Atlas does not run a check for it, so nothing here says whether a particular site is affected.