Vulnerability feed
CVE and vendor PSIRT advisories from 13 sources, last 30 days. Updated hourly, last run
| Expand | Severity |
Score |
Advisory |
Title |
Source |
Flags |
Published |
|---|---|---|---|---|---|---|---|
| Medium | 5.3 | CVE-2026-93627 |
An organizer authentication vulnerability in the email calendar processing of Zimbra Collaboration Suite (ZCS) allows an unauthenticated sender to cancel or modify an existing...
Apache, PHP, OpenSSLPHP, OpenSSL, electron, Zimbra Collaboration Suite, Apache CXF, Zimbra Desktop, Zimbra Modern Zimbra Desktop, OpenJDK, ClamAV, NGINX, Rsync, Apache HttpClient, Spring Core, Cyrus SASL, Jetty, Perl Compress::Zlib, electron graphiql, TinyMCE, @babel/runtime
|
NVD | |||
|
CVE-2026-93627An organizer authentication vulnerability in the email calendar processing of Zimbra Collaboration Suite (ZCS) allows an unauthenticated sender to cancel or modify an existing...
Executive summaryThe advisory is a Zimbra Collaboration Suite security advisory listing many fixed vulnerabilities, including cross-site scripting, authorization flaws, file inclusion, and command injection issues across multiple releases. The advisory does not describe one single severity level for the set, and most entries have no CVSS score stated. The vendor recommends updating Zimbra to the latest release or patch using yum or apt update. Technical summaryThe advisory covers a large batch of fixes spanning cross-site scripting, CSRF, SSRF, local and remote file inclusion, XXE, LDAP injection, authorization bypasses, and a command injection in the SNMP monitoring component, among others. Attack vectors and preconditions vary by entry; some require authentication and others are unauthenticated, as noted in individual entries. Fixed versions are listed as written in the table, such as 10.1.21, 10.1.20, 10.1.17, 10.1.16, and older patch levels like 9.0.0 Patch 46, 10.0.15, and 10.1.9. Most entries have CVSS scores listed as TBD, and some have none. The advisory does not state workarounds for most entries, and it gives no detection guidance beyond upgrading. Exploitation in the wild is not stated. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Dropped extracted product not named in the source: Apache Apache HTTP Server Summarized from https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories Impact if exploitedConfidentialityNone IntegrityLow AvailabilityNone
How it is exploited
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N AffectsApachePHPOpenSSLelectronZimbraOpenJDKClamAVNginxRsyncSpringCyrus SASLJettyPerlTinyMCE@babelPHPOpenSSLelectronZimbra Collaboration SuiteApache CXFZimbra DesktopZimbra Modern Zimbra DesktopOpenJDKClamAVNGINXRsyncApache HttpClientSpring CoreCyrus SASLJettyPerl Compress::Zlibelectron graphiqlTinyMCE@babel/runtime
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Medium | 6.5 | CVE-2026-115786 |
A mailbox quota-accounting vulnerability in Zimbra Collaboration Suite (ZCS) allows an authenticated user to consume another user’s mailbox quota by repeatedly sharing and...
Apache, PHP, OpenSSLPHP, OpenSSL, electron, Zimbra Collaboration Suite, Apache CXF, Zimbra Desktop, Zimbra Modern Zimbra Desktop, OpenJDK, ClamAV, NGINX, Rsync, Apache HttpClient, Spring Core, Cyrus SASL, Jetty, TinyMCE, Apache Log4j
|
NVD | |||
|
CVE-2026-115786A mailbox quota-accounting vulnerability in Zimbra Collaboration Suite (ZCS) allows an authenticated user to consume another user’s mailbox quota by repeatedly sharing and...
Executive summaryThe advisory describes a mailbox quota accounting flaw in Zimbra Collaboration Suite (ZCS) that lets an authenticated user consume another user's mailbox quota by repeatedly sharing items. The text also lists a long set of Zimbra fixes, many with unscored issues, and the advisory does not state a severity rating for the quota flaw. The vendor recommends updating Zimbra with yum or apt to the latest release. Technical summaryThe quota flaw is an accounting weakness: an authenticated user can repeatedly share and unshare content to consume another user's mailbox quota. The advisory does not state a CVSS score, a fixed version for this specific CVE, a workaround, or detection guidance for it. The listed fixes span many classes, including stored and reflected XSS, LFI, SSRF, CSRF, XXE, authorization bypass, and command injection, with fix releases such as 10.1.21, 10.1.20, and 10.1.17, and most CVSS entries marked TBD. The advisory text is truncated, so the complete list and the fix release for CVE-2026-115786 cannot be confirmed from this text. Affected version ranges for the quota flaw, exploitation status, and vendor-published detection indicators are not stated. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Dropped extracted product not named in the source: Apache HTTP Server Summarized from https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories Impact if exploitedConfidentialityNone IntegrityNone AvailabilityHigh
How it is exploited
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H AffectsApachePHPOpenSSLelectronZimbraOpenJDKClamAVNginxRsyncSpringCyrus SASLJettyTinyMCEPHPOpenSSLelectronZimbra Collaboration SuiteApache CXFZimbra DesktopZimbra Modern Zimbra DesktopOpenJDKClamAVNGINXRsyncApache HttpClientSpring CoreCyrus SASLJettyTinyMCEApache Log4j
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| High | 7.7 | CVE-2017-20289 |
Broadstreet Ad Widget plugin for WordPress 2.2.0 before 2.12.0 contains a local file inclusion vulnerability that allows authenticated users to execute attacker-chosen PHP...
PHP, BroadstreetPHP, Broadstreet Ad Widget
|
NVD | |||
|
CVE-2017-20289Broadstreet Ad Widget plugin for WordPress 2.2.0 before 2.12.0 contains a local file inclusion vulnerability that allows authenticated users to execute attacker-chosen PHP...
Executive summaryThe Broadstreet Ad Widget plugin for WordPress is affected by a file inclusion flaw that lets a logged-in user run attacker-chosen PHP code on the server. The advisory rates it as medium risk, and the vendor has released an update that the advisory urges all users to install. Technical summaryThe flaw is a local file inclusion (CWE-98) in ad-widget/views/modal/index.php, where the step GET parameter is passed to a PHP require call with ".php" appended. An attacker must get an authenticated WordPress administrator to load a crafted URL, which can be done through social engineering or phishing; the advisory states that an attacker can then execute any valid PHP code. If allow_url_include=1 is set, remote files may also be included, and on PHP versions below 5.3.4 a null byte (%00) can drop the appended extension. The advisory says the affected range is 2.10.0 and below for the plugin, and the title of the cited page refers to 2.10.0, while the fixed version is not stated beyond a vendor update being released on 2017/04/04. No workaround and no detection guidance are stated, and whether the flaw has been exploited in the wild is not stated. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from https://cxsecurity.com/issue/WLB-2017100084 Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Critical | 9.2 | CVE-2026-109619 |
PHP has various global state that temporarily points into request memory
Siemens, Palo Alto Networks, PHPPalo Alto Networks PAN-OS, PHP, Siemens RUGGEDCOM APE1808, Siemens Ruggedcom Ape1808 Firmware, Palo Alto Networks Panorama Virtual Appliance
|
NVD | |||
|
CVE-2026-109619PHP has various global state that temporarily points into request memory
From the advisoryPHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed. Subsequent requests may read or branch on this stale state before it is fully initialized. Multiple strategies can trigger this condition and produce remote code execution (RCE). Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X AffectsSiemensPalo Alto NetworksPHPPalo Alto Networks PAN-OSPHPSiemens RUGGEDCOM APE1808Siemens Ruggedcom Ape1808 FirmwarePalo Alto Networks Panorama Virtual Appliance
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Critical | 9.2 | CVE-2026-109618 |
PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request
Siemens, Palo Alto Networks, PHPPalo Alto Networks PAN-OS, PHP, Siemens RUGGEDCOM APE1808, Siemens Ruggedcom Ape1808 Firmware, Palo Alto Networks Panorama Virtual Appliance
|
NVD | |||
|
CVE-2026-109618PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request
From the advisoryPHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE). Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X AffectsSiemensPalo Alto NetworksPHPPalo Alto Networks PAN-OSPHPSiemens RUGGEDCOM APE1808Siemens Ruggedcom Ape1808 FirmwarePalo Alto Networks Panorama Virtual Appliance
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Medium | 5.3 | CVE-2026-85733 |
FrankenPHP is a modern application server for PHP
PHPPHP frankenphp
|
NVD | |||
|
CVE-2026-85733FrankenPHP is a modern application server for PHP
From the advisoryFrankenPHP is a modern application server for PHP. Prior to 1.12.5, the official FrankenPHP Debian and Alpine Docker images include a default /app/public/index.php that executes phpinfo(). A derived image that does not overwrite this placeholder serves the diagnostics page in production and can disclose environment variables used for secrets, PHP configuration directives, loaded extensions, software versions, and system paths. Images built using the documented pattern with their own /app/public/index.php are not affected, and already derived images must be rebuilt or supplied with an application index to remove the exposed placeholder. This issue is fixed in version 1.12.5. Impact if exploitedConfidentialityLow IntegrityNone AvailabilityNone
How it is exploited
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Affects
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| High | 7.7 | CVE-2026-82416 |
FrankenPHP is a modern application server for PHP
PHPPHP frankenphp
|
NVD | |||
|
CVE-2026-82416FrankenPHP is a modern application server for PHP
From the advisoryFrankenPHP is a modern application server for PHP. Prior to 1.12.5, FrankenPHP worker mode can retain PHP session state between requests when the session extension is loaded as a shared module and is unavailable through HAVE_PHP_SESSION at compile time. In this build configuration, frankenphp_reset_session_state() is compiled out, PS(id) can survive a request boundary, and a subsequent session_start() can ignore the new request's cookie because an identifier is already present. Under concurrent requests, session_id() can therefore return another client's identifier or a stale identifier from a previous request on the same worker thread, causing cross-user session exposure, possible session hijacking, and intermittent logout behavior. Builds with the session extension statically linked, including the official static binaries and Docker images, are not affected. This issue is fixed in version 1.12.5. Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityLow
How it is exploited
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L Affects
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| High | n/a | CVE-2026-109618 |
CVE-2026-109618 Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products
Palo Alto Networks, PHPPalo Alto Networks PAN-OS, PHP, Palo Alto Networks Panorama, Palo Alto Networks VM-Series firewalls
|
Palo Alto Networks | |||
|
CVE-2026-109618CVE-2026-109619CVE-2026-109618 Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products
Executive summaryPalo Alto Networks says two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, affect its PAN-OS software on PA-Series and VM-Series firewalls and on Panorama. The advisory rates the issue HIGH with a CVSS 4.0 base score of 8.7 and says Palo Alto Networks is not aware of any malicious exploitation. The vendor recommends applying the listed threat signatures and restricting management interface access now, and installing fixed PAN-OS releases as they become available, with several listed for late October 2026. Technical summaryThe flaws are classified as CWE-754 (improper check for unusual or exceptional conditions), and the advisory describes remote code execution through longjmp() handling of out-of-memory and fatal errors in PHP. The advisory states the attack vector is network, attack complexity is low, no privileges or user interaction are required, and the impact is high availability on the product. Affected PAN-OS versions are listed as below 12.2.4-h1, 12.1.4-h13, 12.1.7-h11, 12.1.10-h3, 11.2.4-h23, 11.2.7-h23, 11.2.10-h16, 11.2.13-h4, 11.2.16-h1, 11.1.4-h38, 11.1.6-h40, 11.1.7-h12, 11.1.10-h36, 11.1.13-h16, 11.1.16-h4, 10.2.7-h39, 10.2.10-h42, 10.2.13-h27, 10.2.16-h12 and 10.2.18-h13. The advisory says the issue strictly affects the management web interface (HTTPS web UI and XML API), and affects a dataplane interface only if a management profile is attached. Workarounds include restricting management access to trusted internal addresses or a jump box, enabling listed Threat IDs and content versions, and routing management traffic through a data plane port. The advisory does not state a verified detection method beyond the Threat IDs and points to a Unit 42 article for more detail. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Dropped extracted product not named in the source: Palo Alto Networks PA-Series firewalls Summarized from https://security.paloaltonetworks.com/CVE-2026-109618 ScoreNo CVSS score published. AffectsPalo Alto NetworksPHPPalo Alto Networks PAN-OSPHPPalo Alto Networks PanoramaPalo Alto Networks VM-Series firewalls
Palo Alto Networks Product SecurityPublished
Read the advisory
|
|||||||
| Critical | n/a | cisco-sa-php-october26-Jj384Daq |
Vulnerabilities in PHP Affecting Cisco Products: October 2026
Cisco, PHPPHP, Cisco Duo Access Gateway, Cisco Ultra-Reliable Wireless Backhaul (URWB), Cisco Expressway Series, Cisco Expressway Select Series
|
Cisco PSIRT | |||
|
cisco-sa-php-october26-Jj384DaqCVE-2026-109618CVE-2026-109619Vulnerabilities in PHP Affecting Cisco Products: October 2026
Executive summaryCisco published an advisory covering two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, which can lead to remote code execution. The advisory names a small set of Cisco products as affected, including Ultra-Reliable Wireless Backhaul, Expressway, and Duo Access Gateway, while many other Cisco products are listed as not affected or still under investigation. Cisco recommends applying the fixed software releases in the associated bug IDs and notes that workarounds exist for some products. Technical summaryThe flaws are remote code execution issues in PHP: CVE-2026-109618 is described as RCE via OOM corruption and CVE-2026-109619 as RCE via stale global state. The advisory does not state the network attack vector or other exploit preconditions for the core PHP flaws, but the Duo Access Gateway footnote says the attacker must be authenticated as an administrator for that product, with a CVSS vector of CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H and a score of 6.6. Affected and fixed releases listed are Ultra-Reliable Wireless Backhaul (URWB) with fixed release 27.1.1 (Feb 2027) under bug CSCwx37073, Expressway Series and Expressway Select Series with fixed release 15.5.21 (TBD) under bug CSCwx37062, and Duo Access Gateway with fixed release 3.2.0. A workaround is stated for URWB, with details in its bug ID, and workarounds for other products are referenced to bug IDs. The advisory lists Snort rules 67359 and 67360 as action links, but it does not give further detection guidance. Cisco states it is aware of a public announcement but not of any malicious use, and it does not state a base CVSS score for the core PHP flaws. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-php-october26-Jj384Daq ScoreNo CVSS score published. AffectsCiscoPHPPHPCisco Duo Access GatewayCisco Ultra-Reliable Wireless Backhaul (URWB)Cisco Expressway SeriesCisco Expressway Select Series
Cisco Product Security Incident Response TeamPublished
Read the advisory
|
|||||||
| High | 8.1 | RHSA-2026:88835 |
php:8.2 security update
Red Hat, PHPRed Hat Enterprise Linux, PHP
|
Red Hat Security Advisories | |||
|
RHSA-2026:88835CVE-2026-109618CVE-2026-109619php:8.2 security update
Executive summaryRed Hat published advisory RHSA-2026:88835, an Important-rated security update for the php:8.2 module on Red Hat Enterprise Linux 9.4 systems covered by Update Services for SAP Solutions, Extended Life Cycle, AUS, and related subscriptions. The advisory describes two PHP flaws, one of which it says can lead to remote code execution, and the vendor recommends applying the updated packages. The advisory does not state how many systems are affected in practice or whether exploitation has been observed. Technical summaryThe two issues are CVE-2026-109618, a memory corruption and remote code execution flaw caused by an out-of-memory bailout during request parsing, and CVE-2026-109619, a use-after-free caused by fatal error handling that keeps stale request state. The advisory does not state the attack vector, required preconditions, or CVSS scores, and refers readers to the CVE pages for those details. The fixed package version is php-8.2.13-1.module+el9.4.0+25177+88c847cf.4 for the affected PHP packages, as listed in the advisory. Workarounds are not stated, and no detection guidance is given beyond applying the update per the linked Red Hat article. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from https://access.redhat.com/errata/RHSA-2026:88835 Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affects
Red Hat Product SecurityPublished
Read the advisory
|
|||||||
| High | 8.1 | RHSA-2026:88834 |
php:8.2 security update
Red Hat, PHPRed Hat Enterprise Linux, PHP
|
Red Hat Security Advisories | |||
|
RHSA-2026:88834CVE-2026-109618CVE-2026-109619php:8.2 security update
Executive summaryRed Hat advisory RHSA-2026:88834 provides a php:8.2 security update for Red Hat Enterprise Linux 9.6 Extended Update Support and related channels. Red Hat rates it as Important and fixes two PHP vulnerabilities, CVE-2026-109618 (memory corruption leading to remote code execution) and CVE-2026-109619 (use-after-free). The advisory recommends applying the updated php packages. Technical summaryThe two flaws are a memory corruption issue triggered by out-of-memory bailout during request parsing, which the advisory says can lead to remote code execution, and a use-after-free caused by fatal error handling that retains stale request state. The advisory does not state the attack vector or preconditions beyond these descriptions, and it does not give a CVSS score in the text provided, referring readers to the CVE pages. Fixed package versions are listed as php-8.2.28-1.module+el9.6.0+25176+d8415d54.4 and related module packages, with the update applied through the articles referenced in the Solution section. No workarounds are stated, and no detection guidance or exploitation-in-the-wild information is stated. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from https://access.redhat.com/errata/RHSA-2026:88834 Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affects
Red Hat Product SecurityPublished
Read the advisory
|
|||||||
| High | 8.1 | RHSA-2026:88720 |
php security update
Red Hat, PHPRed Hat Enterprise Linux, PHP
|
Red Hat Security Advisories | |||
|
RHSA-2026:88720CVE-2026-109618CVE-2026-109619php security update
Executive summaryRed Hat has released a security update for PHP on Red Hat Enterprise Linux 9.6 Extended Update Support and related subscriptions. The advisory rates it Important and fixes two flaws, one that the advisory says can lead to memory corruption and remote code execution. Technical summaryThe advisory describes CVE-2026-109618, an out-of-memory bailout during request parsing that leads to memory corruption and remote code execution, and CVE-2026-109619, where fatal error handling retains stale request state leading to use-after-free. The advisory does not state the attack vector, required preconditions, or CVSS scores, and refers readers to the CVE pages for those details. Affected PHP package versions are listed as php-8.0.30-3.el9_6.2 on RHEL 9.6 variants, and the fixed package is the same build. No workarounds are stated, and no detection guidance or evidence of exploitation in the wild is stated. Administrators are directed to the Red Hat article at https://access.redhat.com/articles/11258 for update instructions. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from https://access.redhat.com/errata/RHSA-2026:88720 Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affects
Red Hat Product SecurityPublished
Read the advisory
|
|||||||
| High | 8.1 | RHSA-2026:88725 |
php security update
Red Hat, PHPRed Hat Enterprise Linux, PHP
|
Red Hat Security Advisories | |||
|
RHSA-2026:88725CVE-2026-109618CVE-2026-109619php security update
Executive summaryRed Hat has released a security update for PHP on Red Hat Enterprise Linux 9.4 systems covered by several update and life cycle programs. It fixes two vulnerabilities that Red Hat rates as Important, one of which the advisory says can lead to remote code execution. The advisory says to apply the updated php packages as described in the linked Red Hat article. Technical summaryThe advisory describes two PHP flaws: CVE-2026-109618, an out-of-memory bailout during request parsing that leads to memory corruption and remote code execution, and CVE-2026-109619, where fatal error handling retains stale request state and causes a use-after-free. The advisory does not state the attack vector, required preconditions, or any authentication requirement in detail, and it does not give a CVSS score in the text provided. The fixed package version is php-8.0.30-1.el9_4.2, but the advisory does not state the affected (pre-fix) versions. No workarounds, mitigations, or detection guidance are stated, and exploitation in the wild is not stated. Defenders should apply the listed updated packages. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from https://access.redhat.com/errata/RHSA-2026:88725 Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affects
Red Hat Product SecurityPublished
Read the advisory
|
|||||||
| High | 8.1 | RHSA-2026:88693 |
php security update
Red Hat, PHPRed Hat Enterprise Linux, PHP, Red Hat Enterprise Linux Server - Extended Life Cycle Support 7
|
Red Hat Security Advisories | |||
|
RHSA-2026:88693CVE-2026-109619php security update
Executive summaryRed Hat has released a security update for the PHP scripting language on Red Hat Enterprise Linux 7 Extended Lifecycle Support systems. The advisory rates the flaw Important, a use-after-free issue in PHP's fatal error handling. Red Hat recommends applying the updated php packages. Technical summaryThe flaw is tracked as CVE-2026-109619 and is described as a use-after-free caused by fatal error handling that retains stale request state in PHP. The advisory does not state the attack vector, required preconditions, or whether it is exploited in the wild. Fixed package version is php-5.4.16-48.el7_9.1 for the listed RHEL 7 ELS architectures (x86_64, s390x, ppc64, ppc64le). The advisory does not state a CVSS score, workarounds, or detection guidance beyond referring to the CVE page and the update article at https://access.redhat.com/articles/11258. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from https://access.redhat.com/errata/RHSA-2026:88693 Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H AffectsRed HatPHPRed Hat Enterprise LinuxPHPRed Hat Enterprise Linux Server - Extended Life Cycle Support 7
Red Hat Product SecurityPublished
Read the advisory
|
|||||||
| High | 8.1 | RHSA-2026:88659 |
php security update
Red Hat, PHPRed Hat Enterprise Linux, PHP
|
Red Hat Security Advisories | |||
|
RHSA-2026:88659CVE-2026-109618CVE-2026-109619php security update
Executive summaryRed Hat has released a security update for the PHP scripting language on Red Hat Enterprise Linux 9.2 systems covered by its Update Services for SAP Solutions, Extended Life Cycle, and related subscriptions. The advisory rates the update Important and says it fixes two flaws, one of which can lead to remote code execution, so administrators should apply the packaged PHP update to affected systems. Technical summaryThe two flaws are CVE-2026-109618, described as an out-of-memory bailout during request parsing that leads to memory corruption and remote code execution, and CVE-2026-109619, described as fatal error handling that retains stale request state and leads to a use-after-free. The advisory does not state the attack vector, required preconditions, or CVSS scores, and refers readers to the CVE pages for those details. The fixed package version is php-8.0.30-1.el9_2.2, and the advisory lists SHA-256 checksums for each package. No workarounds and no detection guidance are stated in the advisory, and it does not say whether exploitation in the wild has been observed. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from https://access.redhat.com/errata/RHSA-2026:88659 Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affects
Red Hat Product SecurityPublished
Read the advisory
|
|||||||
| High | 8.1 | RHSA-2026:88561 |
php security update
Red Hat, PHPRed Hat Enterprise Linux, PHP
|
Red Hat Security Advisories | |||
|
RHSA-2026:88561CVE-2026-109618CVE-2026-109619php security update
Executive summaryRed Hat has released a security update for PHP on Red Hat Enterprise Linux 10.0 Extended Update Support and related 4 years of updates channels. Red Hat rates the update as Important and says it fixes two flaws, one of which it describes as leading to memory corruption and remote code execution. Technical summaryThe advisory lists two fixes: CVE-2026-109618, an out-of-memory bailout during request parsing that leads to memory corruption and remote code execution, and CVE-2026-109619, where fatal error handling retains stale request state and leads to a use-after-free. The advisory does not state the attack vector, required preconditions, or CVSS scores, and refers readers to the CVE pages for those details. Affected PHP package version is 8.3.19-1.el10_0.2 as shown in the package lists, and the advisory does not state a separate vulnerable version range. No workarounds are stated. The advisory points to an access.redhat.com article for applying the update and does not describe specific detection guidance or evidence of exploitation in the wild. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from https://access.redhat.com/errata/RHSA-2026:88561 Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affects
Red Hat Product SecurityPublished
Read the advisory
|
|||||||
| High | 8.1 | RHSA-2026:88565 |
php:7.4 security update
Red Hat, PHPRed Hat Enterprise Linux, PHP, Red Hat Enterprise Linux Server - AUS 8.4, Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.4
|
Red Hat Security Advisories | |||
|
RHSA-2026:88565CVE-2026-109618CVE-2026-109619php:7.4 security update
Executive summaryRed Hat published an Important-rated security update for the PHP 7.4 module on Red Hat Enterprise Linux 8.4 Extended Update Support and Advanced Mission Critical Update Support systems. The advisory describes two PHP flaws, one of which it says can lead to memory corruption and remote code execution. Red Hat recommends applying the update, and the advisory points to its standard update instructions. Technical summaryThe advisory covers CVE-2026-109618, described as an out-of-memory bailout during request parsing that leads to memory corruption and remote code execution, and CVE-2026-109619, described as fatal error handling that retains stale request state and leads to a use-after-free. The advisory does not state the attack vector, required preconditions, or CVSS scores beyond referring to the CVE pages. Fixed package versions are listed as php-7.4.6-5.module+el8.4.0+25156+e0c98721.3 and related packages, and the advisory does not give separate fixed versions for each flaw. No workarounds or mitigations are stated. No detection guidance or evidence of exploitation in the wild is stated. Administrators should consult the Red Hat article referenced in the Solution section for installation details. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from https://access.redhat.com/errata/RHSA-2026:88565 Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H AffectsRed HatPHPRed Hat Enterprise LinuxPHPRed Hat Enterprise Linux Server - AUS 8.4Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.4
Red Hat Product SecurityPublished
Read the advisory
|
|||||||
| High | 8.1 | RHSA-2026:88532 |
php:7.4 security update
Red Hat, PHP, libzipRed Hat Enterprise Linux, PHP, libzip
|
Red Hat Security Advisories | |||
|
RHSA-2026:88532CVE-2026-109618CVE-2026-109619php:7.4 security update
Executive summaryRed Hat has released an important-rated security update for the PHP 7.4 module on Red Hat Enterprise Linux 8.8 systems in its Update Services for SAP Solutions and Telecommunications Update Service channels. The advisory describes two PHP flaws, CVE-2026-109618 (memory corruption and possible remote code execution during request parsing) and CVE-2026-109619 (use-after-free after fatal error handling), and recommends applying the updated packages referenced in the advisory. Technical summaryCVE-2026-109618 is described as an out-of-memory bailout during request parsing that leads to memory corruption and remote code execution. CVE-2026-109619 is described as fatal error handling that retains stale request state, leading to a use-after-free. The advisory does not state the attack vector or preconditions beyond these descriptions, and it does not state a CVSS score; it refers readers to the CVE pages for that. Fixed package versions are listed as php-7.4.33-1.module+el8.8.0+25148+55cf9df9.2 and related php modules, with libzip, php-pear, and php-pecl packages also updated. The advisory does not state any workaround, and it does not state whether exploitation in the wild has occurred. Detection guidance is not stated; the advisory points to https://access.redhat.com/articles/11258 for update instructions. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from https://access.redhat.com/errata/RHSA-2026:88532 Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affects
Red Hat Product SecurityPublished
Read the advisory
|
|||||||
| High | 8.1 | RHSA-2026:88533 |
php:7.4 security update
Red Hat, PHP, libzipRed Hat Enterprise Linux, PHP, libzip
|
Red Hat Security Advisories | |||
|
RHSA-2026:88533CVE-2026-109618CVE-2026-109619php:7.4 security update
Executive summaryRed Hat has released a security update for the PHP 7.4 module on Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Extended Update Support systems. Red Hat rates the update as Important and says two PHP flaws are fixed, one of which can lead to remote code execution. The advisory recommends applying the update, and the instructions are in the Red Hat article it links. Technical summaryThe advisory describes two PHP flaws: CVE-2026-109618, an out-of-memory bailout during request parsing that leads to memory corruption and remote code execution, and CVE-2026-109619, where fatal error handling retains stale request state, causing a use-after-free. The advisory does not state attack vector details, required preconditions, or CVSS scores, and it refers readers to the CVE pages for those. Fixed package versions are listed as php-7.4.19-4.module+el8.6.0+25157+c2ff122e.3 and related php packages, with libzip-1.6.1-1.module+el8.3.0+6678+b09f589e and several PECL packages also updated. No workarounds or detection guidance are stated in the advisory. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from https://access.redhat.com/errata/RHSA-2026:88533 Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affects
Red Hat Product SecurityPublished
Read the advisory
|
|||||||
| Critical | 9.8 | HPESBGN05174 |
Certain HPE Products Impacted by Multiple PHP Vulnerabilities (PHP2Shell)
HPE, PHPPHP
|
HPE Security Bulletins | |||
|
HPESBGN05174CVE-2026-109618CVE-2026-109619Certain HPE Products Impacted by Multiple PHP Vulnerabilities (PHP2Shell)
Executive summaryCertain HPE, Aruba, and Juniper products are affected by PHP2Shell, a pair of critical flaws in the core PHP engine that can allow remote code execution without logging in. The advisory rates the two CVEs at 9.2 under CVSS 4.0 and lists 9.8 and 8.1 under CVSS 3.1. Guidance for specific products is provided through linked vendor pages, and the advisory does not state a single fix for all products. Technical summaryThe advisory describes two pre-authentication remote code execution vulnerabilities in the core PHP engine, tracked as CVE-2026-109618 and CVE-2026-109619. The CVSS 4.0 vectors show network attack, high attack complexity, and no privileges or user interaction required. Affected HPE product versions are listed, including Aruba ClearPass Policy Manager 6.11.0 through 6.14.0, HPE Data Management Framework 7 DMF_Suite_4.10-rhel810, HPE Private Cloud AI v1.11.0, 1.12.1, and 2026.07.01, and Cray ClusterStor Data Services 7.2 and 7.3. Fixed versions are not stated in the advisory, and workarounds and detection guidance are not stated; the advisory refers readers to separate Juniper and Aruba ClearPass pages for product-specific resolution. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Dropped extracted product not named in the source: Hewlett Packard Enterprise Aruba ClearPass Policy Manager Dropped extracted product not named in the source: Hewlett Packard Enterprise HPE Data Management Framework 7 Dropped extracted product not named in the source: Hewlett Packard Enterprise HPE Private Cloud AI Dropped extracted product not named in the source: Hewlett Packard Enterprise Cray ClusterStor Data Services Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affects
Hewlett Packard EnterprisePublished
Read the advisory
|
|||||||
| Critical | 9.8 | MISA-2026-0008 |
PHP Remote Code Execution (RCE) Vulnerability (php2shell, CVE-2026-109618, CVE-2026-109619)
Mitel, PHPPHP, Mitel MiVoice 5000, Mitel MiVoice Connect, Mitel OpenScape Branch, Mitel OpenScape SBC, Mitel Collaboration Management (CMG), Mitel MiCollab Advanced Messaging, Mitel OpenScape Voice Trace Manager, Mitel MiContact Center Enterprise
|
Mitel Security Advisories | |||
|
MISA-2026-0008CVE-2026-109618CVE-2026-109619PHP Remote Code Execution (RCE) Vulnerability (php2shell, CVE-2026-109618, CVE-2026-109619)
Executive summaryMitel says two critical remote code execution flaws in the PHP scripting language, CVE-2026-109618 and CVE-2026-109619, may affect some of its products. Several Mitel products are confirmed affected, including MiVoice 5000, MiVoice Connect, OpenScape Branch, OpenScape SBC, Mitel Collaboration Management, MiCollab Advanced Messaging, OpenScape Voice Trace Manager, and MiContact Center Enterprise, while others are still under investigation. Mitel recommends applying the security updates in its knowledge base article KB000128981 and related articles, and contacting Mitel support or a Mitel partner if access to that article is unavailable. Technical summaryThe advisory describes two PHP flaws: CVE-2026-109618 in the out-of-memory error handling component, caused by improperly controlled sequential memory allocation, and CVE-2026-109619 in request state management, caused by improper reset of global state referencing request memory. Both are described as allowing an unauthenticated remote attacker with network access to a PHP-served interface to execute arbitrary code, and the CVE record rates both as critical with CVSS 3.1 base score 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Affected versions are listed per product, such as MiVoice 5000 R8.4 and earlier, MiVoice Connect R20.0 SP2 and earlier, and OpenScape Branch and OpenScape SBC V11R3.4.3 and earlier, with fixes referenced through KB000128981, KB000128990, KB000128993, and KB000128997. Fixed versions are not stated in the advisory text, and no workarounds or detection guidance are provided. Exploitation in the wild is not stated. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H AffectsMitelPHPPHPMitel MiVoice 5000Mitel MiVoice ConnectMitel OpenScape BranchMitel OpenScape SBCMitel Collaboration Management (CMG)Mitel MiCollab Advanced MessagingMitel OpenScape Voice Trace ManagerMitel MiContact Center Enterprise
Mitel Product Security Incident Response TeamPublished
Read the advisory
|
|||||||