In versions of Zend Server 8.5 and prior to version 9.2 a format string injection was discovered.

Reported by Dylan Marino