DeutschShown in its original language — a full translation is planned for a future version.
PHP: Mehrere Schwachstellen
view advisory published 2026-07-30
Ein Angreifer kann mehrere Schwachstellen in PHP ausnutzen, um SQL-Injection durchzuführen, beliebigen Code auszuführen, Daten zu manipulieren oder einen Denial-of-Service-Zustand auszulösen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-7260US | medium5.5 | — | ||
Circular symbolic links in phar archives could lead to unbounded recursion, exhausting the C stack and crashing the PHP process, in PHP versions from 8.2.* before 8.2.33, from 8.3.… | ||||
| CVE-2026-17544US | critical9.8 | Exploit | ||
Attacker-provided inputs to bccomp() could lead to an out-of-bounds write with stack and heap corruption in PHP versions from 8.4.* before 8.4.24 and from 8.5.* before 8.5.9. | ||||
| CVE-2026-17543US | critical9.8 | Exploit | ||
Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2026:56969 vom 2026-08-20external
- Red Hat Security Advisory RHSA-2026:57539 vom 2026-08-20external
- Red Hat Security Advisory RHSA-2026:57574 vom 2026-08-20external
- Red Hat Security Advisory RHSA-2026:61259 vom 2026-08-31external
- Red Hat Security Advisory RHSA-2026:61903 vom 2026-09-01external
- Red Hat Security Advisory RHSA-2026:62334 vom 2026-09-02external
- Red Hat Security Advisory RHSA-2026:62614 vom 2026-09-02external
- Amazon Linux Security Advisory ALAS2PHP8.2-2026-013 vom 2026-08-05external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan