CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

CSIRTSSecurity advisory fusion

← All products & vendors

PHP — security advisories

17 advisories3 exploitedlatest 2026-08-24⚡ RSS feed

Tracked PHP products:

⚡ Watch PHP

Get an email when a new PHP advisory drops — max one per day, one-click unsubscribe.

[UPDATE] [high] PHP: Multiple Vulnerabilities

highCVE-2026-17543 CVE-2026-17544 CVE-2026-7260cert-bund2026-08-24

[NEW] [medium] PHP: Multiple vulnerabilities allow denial of service

mediumCVE-2026-12184 CVE-2026-14355cert-bund2026-08-14

CVE-2007-3205: The parse_str function in (1) PHP, (2) Hardened-PHP, and (3) Suhosin, when called without a second parameter, might allow remote attackers to overwrite arbitrary variables by specifying variable names and values in the string to be parsed. NOTE: it is not clear whether this is a design limitation of the function or a bug in PHP, although it is likely to be regarded as a bug in Hardened-PHP and Suhosin.

unknownCVE-2007-3205msrc2026-08-06

CVE-2022-31631: PDO::quote() may return unquoted string

criticalCVSS 9.1CVE-2022-31631msrc2026-08-06

CVE-2023-0567: password_verify() always returns true for some invalid hashes

highCVSS 7.7CVE-2023-0567msrc2026-08-06

PHP Multiple Vulnerabilities

unknownCVE-2026-7260 CVE-2026-9672 CVE-2026-17543 CVE-2026-17544hkcert2026-08-03

Multiple vulnerabilities in PHP (July 31, 2026)

unknownCVE-2026-7260 CVE-2026-17543 CVE-2026-17544 CVE-2026-9672cert-fr-avis2026-07-31

DSA-6406-1 php8.4 - security update

unknownCVE-2026-7260 CVE-2026-17543 CVE-2026-17544debian2026-07-31

[UPDATE] [high] PHP: Multiple vulnerabilities

highCVE-2025-14179 CVE-2026-6104 CVE-2026-6722 CVE-2026-6735cert-bund2026-07-30

USN-8564-1: PHP vulnerabilities

unknownCVE-2026-12184 CVE-2026-14355ubuntu2026-07-20

[UPDATE] [low] PHP: Multiple vulnerabilities allow unspecified attack

lowCVE-2026-44927 CVE-2026-44928cert-bund2026-07-17

Multiple vulnerabilities in PHP (July 7, 2026)

unknownCVE-2026-14355 CVE-2026-12184cert-fr-avis2026-07-07

USN-8513-1: PHP vulnerabilities

unknownCVE-2026-6722 CVE-2026-7261 CVE-2025-14179ubuntu2026-07-06

DSA-6377-1 php8.4 - security update

unknownCVE-2026-14355debian2026-07-04

CVE-2024-4577: PHP-CGI OS Command Injection Vulnerability

criticalexploitedCVE-2024-4577cisa-kev2024-06-12

CVE-2012-1823: PHP-CGI Query String Parameter Vulnerability

criticalexploitedCVE-2012-1823cisa-kev2022-03-25

CVE-2019-11043: PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability

criticalexploitedCVE-2019-11043cisa-kev2022-03-25