CVE-2026-72700: Php Timing Attack Token Comparisoncve-2026-72700-php-timing-attack-token-comparison
Sensitive tokens or secrets are compared using non-constant-time equality operators (`===` or `==`). This leaks timing information and may allow attackers to deduce valid tokens via side-channel attacks. Use `hash_equals()` for constant-time comparison instead.
