CVE-2022-27157: PHP Pearweb

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

pearweb < 1.32 is suffers from a Weak Password Recovery Mechanism via include/users/passwordmanage.php.

Affected products

• PHP Pearweb: before 1.32.0 (fixed in 1.32.0)

Published 2022-04-15. Last modified 2026-06-17.