0-9 A B C D E F G H I J K L M N O P Q R S T U V W X Y Z
| Supplier | Product | Version (see Status) | Status CVE-2026-109618 | Status CVE-2026-109619 | Notes | Links |
|---|---|---|---|---|---|---|
| YetiForce S.A. | YetiForce CRM | Vulnerable | Vulnerable | CVE assessment: Affected when deployed on an affected web-serving PHP runtime; product evidence establishes a PHP web application, web interface, web service or HTTP framework scope, and the PHP defect is below the application layer. The 7.x guide identifies PHP, mandatory modules and optional/integration-specific libraries. |
source 1 source 2 source 3 |
|
| Yii Software / Yii project | Yii 2 framework | Vulnerable | Vulnerable | CVE assessment: Affected when deployed on an affected web-serving PHP runtime; product evidence establishes a PHP web application, web interface, web service or HTTP framework scope, and the PHP defect is below the application layer. Yii 2 release metadata declares a server PHP framework and separately lists lib-pcre and browser asset packages. |
source | |
| Yii Software / Yii project | Yii Web extension abandoned prototype | Investigation | Investigation | CVE assessment: Historical scope; current use unknown The package registry explicitly marks this old PHP web extension abandoned and recommends yiisoft/yii-middleware instead. |
source | |
| YOURLS project | YOURLS | Vulnerable | Vulnerable | CVE assessment: Affected when deployed on an affected web-serving PHP runtime; product evidence establishes a PHP web application, web interface, web service or HTTP framework scope, and the PHP defect is below the application layer. The official project explicitly describes PHP scripts providing self-hosted URL shortening, statistics and plugins. |
source |