Announcements

CVE-2026-6104 (matched: php)

  • 26th July 2026
A security flaw has been identified in specific versions of PHP, the open-source software that powers most dynamic websites. The issue impacts PHP 8.4.* releases older than 8.4.21 and PHP 8.5.* releases older than 8.5.6.The vulnerability is triggered when a specially crafted input containing a hidden null byte is sent to common PHP tools used for ...
Continue reading

CVE-2026-7261 (matched: php)

  • 26th July 2026
A security flaw has been identified in specific versions of PHP, the software that powers most dynamic, interactive websites. The issue affects PHP 8.2 versions older than 8.2.31, 8.3 versions older than 8.3.31, 8.4 versions older than 8.4.21, and 8.5 versions older than 8.5.6. This flaw only impacts websites that use PHP's SOAP server feature ...
Continue reading

CVE-2026-6722 (matched: php)

  • 26th July 2026
A security flaw has been identified in specific versions of PHP, the software that powers most dynamic websites and web applications. The affected versions are all 8.2 releases older than 8.2.31, all 8.3 releases older than 8.3.31, all 8.4 releases older than 8.4.21, and all 8.5 releases older than 8.5.6. The issue is a flaw in PHP's SOAP ...
Continue reading

CVE-2025-14179 (matched: php)

  • 26th July 2026
A security flaw has been identified in specific older versions of PHP, the software that powers most websites. The issue only impacts sites that use the PDO Firebird database driver to connect to a Firebird database, and affects PHP 8.2 versions older than 8.2.31, 8.3 versions older than 8.3.31, 8.4 versions older than 8.4.21, and 8.5 versions ...
Continue reading