High severity8.8NVD Advisory· Published Nov 16, 2018· Updated Jun 17, 2026
CVE-2018-19296
CVE-2018-19296
Description
PHPMailer before 5.2.27 and 6.x before 6.0.6 is vulnerable to an object injection attack.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
phpmailer/phpmailerPackagist | >= 5.0.0, < 5.2.27 | 5.2.27 |
phpmailer/phpmailerPackagist | >= 6.0.0, < 6.0.6 | 6.0.6 |
Affected products
1Patches
Vulnerability mechanics
References
14- github.com/PHPMailer/PHPMailer/releases/tag/v5.2.27nvdRelease NotesVendor AdvisoryWEB
- github.com/PHPMailer/PHPMailer/releases/tag/v6.0.6nvdRelease NotesVendor AdvisoryWEB
- github.com/advisories/GHSA-7w4p-72j7-v7c2ghsaADVISORY
- lists.debian.org/debian-lts-announce/2018/12/msg00020.htmlnvdMailing ListThird Party AdvisoryWEB
- nvd.nist.gov/vuln/detail/CVE-2018-19296ghsaADVISORY
- www.debian.org/security/2018/dsa-4351nvdThird Party AdvisoryWEB
- github.com/FriendsOfPHP/security-advisories/blob/master/phpmailer/phpmailer/CVE-2018-19296.yamlghsaWEB
- github.com/PHPMailer/PHPMailer/security/advisories/GHSA-7w4p-72j7-v7c2ghsaWEB
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3B5WDPGUFNPG4NAZ6G4BZX43BKLAVA5BghsaWEB
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KPU66INRFY5BQ3ESVPRUXJR4DXQAFJVTghsaWEB
- lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3B5WDPGUFNPG4NAZ6G4BZX43BKLAVA5BghsaWEB
- lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KPU66INRFY5BQ3ESVPRUXJR4DXQAFJVTghsaWEB
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3B5WDPGUFNPG4NAZ6G4BZX43BKLAVA5B/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KPU66INRFY5BQ3ESVPRUXJR4DXQAFJVT/nvd
News mentions
0No linked articles in our index yet.