Skip to content

Vendor

simplepie vulnerabilities

1 published CVE affecting simplepie, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of simplepie alerts

Products

Latest simplepie CVEs

Newest publication first

  1. CVE-2026-111234 SimplePie through 1.9.0 Local File Read via file:// Redirect

    Published
    HighCVSS 8.2

    SimplePie through 1.9.0 contains a local file read vulnerability that allows malicious feed servers to read server files by supplying file:// URLs in redirects or autodiscovery links. Attackers can return a Location header or feed link pointing to a file:// path, causing file_get...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.