EIP-2026-110660

The advisory describes an authentication bypass vulnerability in PHPCaptcha (Securimage) due to insufficient distortion in the audio CAPTCHA, allowing attackers to decode the CAPTCHA via binary analysis of the MP3/WAV files. The issue can be exploited remotely without authentication by accessing the /secure_play.php URI.