CVE-2026-93957

Medium

Description

A vulnerability has been found in olivier-ls PHP-FTS up to 1.1.3. This affects the function SearchEngine::matchesSingleFilter of the file src/SearchEngine.php of the component Filter Matching. The manipulation leads to incorrect comparison. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. Upgrading to version 1.1.4 is able to mitigate this issue. The identifier of the patch is 0b2fae333d6b022da7ed4c43e2d41aa03f91dff3. It is suggested to upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.

SeverityMedium
CVSS4.3
Exploit probability—
ProductOlivier-ls Php-fts
PublishedSep 20, 2026
First seenSep 20, 2026
Weakness typeCWE-697CWE-697

How to fix

Affected products

ProductAffected versionsFixed in
olivier-ls php-fts1.1.0, 1.1.1, 1.1.2, 1.1.3—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.