CVE-2026-93957: olivier-ls PHP-FTS Filter Matching SearchEngine.php matchesSingleFilter comparison
A vulnerability has been found in olivier-ls PHP-FTS up to 1.1.3. This affects the function SearchEngine::matchesSingleFilter of the file src/SearchEngine.php of the component Filter Matching. The manipulation leads to incorrect comparison. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. Upgrading to version 1.1.4 is able to mitigate this issue. The identifier of the patch is 0b2fae333d6b022da7ed4c43e2d41aa03f91dff3. It is suggested to upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
olivier-ls PHP-FTS Filter Matching SearchEngine.php matchesSingleFilter comparisonto a version that resolves this vulnerability.Fixed in 1.1.4Patch 0b2fae333d6b022da7ed4c43e2d41aa03f91dff3
Event History
Frequently Asked Questions
Which deployments are affected?
Deployments using olivier-ls PHP-FTS versions up to and including 1.1.3 are affected where the Filter Matching component invokes SearchEngine::matchesSingleFilter.
What level of access does an attacker need?
The issue can be exploited remotely with low privileges and does not require user interaction. Public exploit disclosure means exploitation details may be available to attackers.
What is the recommended remediation?
Upgrade olivier-ls PHP-FTS to version 1.1.4. The vendor patch is identified as 0b2fae333d6b022da7ed4c43e2d41aa03f91dff3.