PHP PHP

Name: PHP PHP
Brand: PHP

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

3critical1high1medium0low

updated 2026-10-28

vulnerabilities (5)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-109618US	critical9.8OT critical	100.0% (100th)	KEV	no fix	2026-10-21	≤ vers:unknown/*
CVE-2026-109619US	high8.1OT critical	100.0% (100th)	KEV	no fix	2026-10-21	≤ vers:unknown/*
CVE-2019-11043US	critical9.8OT critical	99.7% (100th)	KEV	7.2.24	2019-10-28	3 versions
CVE-2014-3622US	critical9.8	3.12% (88th)	—	no fix	2020-02-19	≤ 5.6.x before 5.6.1
CVE-2026-14355US	medium5.3	0.28% (20th)	—	8.2.32	2026-07-03	4 versions

The flaw types (CWEs) most of these CVEs share.

CWE-416Use After Free3 CVEs
CWE-1325Improperly Controlled Sequential Memory Allocation2 CVEs
CWE-1419Incorrect Initialization of Resource2 CVEs
CWE-755Improper Handling of Exceptional Conditions2 CVEs
CWE-824Access of Uninitialized Pointer2 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs
CWE-122Heap-based Buffer Overflow1 CVEs
CWE-787Out-of-bounds Write1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.