High severity7.3NVD Advisory· Published Sep 17, 2020· Updated Jun 17, 2026

CVE-2020-25490

Description

Lack of cryptographic signature verification in the Sqreen PHP agent daemon before 1.16.0 makes it easier for remote attackers to inject rules for execution inside the virtual machine.

Affected products

Sqreen/PHP agent daemondescription
Sqreen/PHP Microagent
cpe:2.3:a:sqreen:php_microagent:*:*:*:*:*:*:*:*
Range: <1.16.0
Sqreen/PHP agentllm-fuzzy
Range: <1.16.0

Patches

Vulnerability mechanics

References

blog.sqreen.com/vulnerability-disclosure-finding-a-vulnerability-in-sqreens-php-agent-and-how-we-fixed-it/nvdExploitVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.474
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000