Threat Convergence
Focus on the CVEs with the strongest combination of signals: CISA KEV, exploit references and Critical severity. Ranked by 3, 2, then 1 matching signals across your selected time window.
php 8.4
Matching NVD version criteria are shown first; full configuration applicability is not asserted.
Vendors: not yet verified
Match: Exact product · 106 indexed CVEs · 48 identities found for this search
Full CVE-ID signal lookup: 26 / 26 checked · complete index pass · KEV 0 · exploit references 0 · advisory-linked 0. The four cards below remain based on the 26 enriched CVEs and are clickable filters for that subset.
How it connects
Click any box to explore the associated evidence or switch identity. Lifecycle and later-release details appear below the CVEs.Associated vulnerabilities
Version 8.4 · matching CPE criteria · 26 match · Threat Convergence · RCE-refined · click a row for affected products and evidence
CVE-2026-6722
Use-After-Free in SOAP using Apache mapNVD lists: Software: php / php (≥ 8.2.0 < 8.2.31 / ≥ 8.3.0 < 8.3.31), Software: PHP Group / PHP, Software: Red Hat / Red Hat Enterprise Linux 7 · +4 more affected products — expand row ↓
9.5Critical
1.30%
CWE-825CWE-416 Version matches source range* BSI CSAF 3 resolved adv
7 products (10 criteria)
›
Vendor statements are preserved separately from CISA advisories. A product must match the advisory's affected version conditions before treating it as vulnerable.
www_bsi_bund_de · WID-SEC-W-2026-1433 — PHP: Mehrere Schwachstellen Read CSAF ↗
www_bsi_bund_de · WID-SEC-W-2026-2455 — Oracle Solaris Drittanbieterkomponenten: Mehrere Schwachstellen Read CSAF ↗
First published: 2026-05-10 04:19 UTC · CVE record last modified: 2026-05-10 04:19 UTC
Use-After-Free in SOAP using Apache map
Listed as affected (NVD criteria)
Advisories & activity
Indexed in
Raw evidence & CPE identifiers
cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cve: title=Use-After-Free in SOAP using Apache map;
epss: percentile=0.69856;
vulnrichment: title=Use-After-Free in SOAP using Apache map; published=2026-05-10T04:19:15.288Z;
CVSS from cve (cvss_score)
CVE-2024-11235
Reference counting in php_request_shutdown causes Use-After-FreeNVD lists: Software: php / php (≥ 8.3.0 < 8.3.19 / ≥ 8.4.0 < 8.4.5), Software: PHP Group / PHP
9.2Critical
1.48%
CWE-416 Version matches source range* BSI CSAF 3 resolved adv
2 products (3 criteria)
›
Vendor statements are preserved separately from CISA advisories. A product must match the advisory's affected version conditions before treating it as vulnerable.
www_bsi_bund_de · WID-SEC-W-2025-0566 — PHP: Mehrere Schwachstellen Read CSAF ↗
First published: 2025-04-04 17:51 UTC · CVE record last modified: 2025-04-04 17:55 UTC
Reference counting in php_request_shutdown causes Use-After-Free
Listed as affected (NVD criteria)
Advisories & activity
Indexed in
Raw evidence & CPE identifiers
cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cve: title=Reference counting in php_request_shutdown causes Use-After-Free;
epss: percentile=0.73525;
vulnrichment: title=Reference counting in php_request_shutdown causes Use-After-Free; published=2025-04-04T17:51:07.550Z;
CVSS from cve (cvss_score)
CVE-2025-14180
NULL Pointer Dereference in PDO quotingNVD lists: Software: php / php (≥ 8.1.0 < 8.1.34 / ≥ 8.2.0 < 8.2.30), Software: PHP Group / PHP
8.2High
0.70%
CWE-476 Version matches source range* BSI CSAF 5 resolved adv
2 products (6 criteria)
›
Vendor statements are preserved separately from CISA advisories. A product must match the advisory's affected version conditions before treating it as vulnerable.
www_bsi_bund_de · WID-SEC-W-2025-2887 — PHP: Mehrere Schwachstellen Read CSAF ↗
www_bsi_bund_de · WID-SEC-W-2026-1730 — Xerox FreeFlow Print Server: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff Read CSAF ↗
First published: 2025-12-27 19:21 UTC · CVE record last modified: 2025-12-27 19:21 UTC
NULL Pointer Dereference in PDO quoting
Listed as affected (NVD criteria)
Advisories & activity
Indexed in
Raw evidence & CPE identifiers
cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cve: title=NULL Pointer Dereference in PDO quoting;
epss: percentile=0.52118;
vulnrichment: title=NULL Pointer Dereference in PDO quoting; published=2025-12-27T19:21:20.768Z;
CVSS from cve (cvss_score)
CVE-2026-6104
Global buffer over-read in mb_convert_encoding() with attacker-supplied encodingNVD lists: Software: php / php (≥ 8.4.0 < 8.4.21 / ≥ 8.5.0 < 8.5.6), Software: PHP Group / PHP, Software: Red Hat / Red Hat Enterprise Linux 9 · +5 more affected products — expand row ↓
8.2High
0.60%
CWE-125 Version matches source range* BSI CSAF 3 resolved adv
8 products (9 criteria)
›
Vendor statements are preserved separately from CISA advisories. A product must match the advisory's affected version conditions before treating it as vulnerable.
www_bsi_bund_de · WID-SEC-W-2026-1433 — PHP: Mehrere Schwachstellen Read CSAF ↗
www_bsi_bund_de · WID-SEC-W-2026-2455 — Oracle Solaris Drittanbieterkomponenten: Mehrere Schwachstellen Read CSAF ↗
First published: 2026-05-10 04:35 UTC · CVE record last modified: 2026-05-10 04:35 UTC
Global buffer over-read in mb_convert_encoding() with attacker-supplied encoding
Listed as affected (NVD criteria)
Advisories & activity
Indexed in
Raw evidence & CPE identifiers
cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cve: title=Global buffer over-read in mb_convert_encoding() with attacker-supplied encoding;
epss: percentile=0.47696;
vulnrichment: title=Global buffer over-read in mb_convert_encoding() with attacker-supplied encoding; published=2026-05-10T04:35:17.328Z;
CVSS from cve (cvss_score)
CVE-2025-14179
SQL injection in pdo_firebird via NUL bytes in quoted stringsNVD lists: Software: php / php (≥ 8.2.0 < 8.2.31 / ≥ 8.3.0 < 8.3.31), Software: PHP Group / PHP, Software: Red Hat / Red Hat Enterprise Linux 9 · +5 more affected products — expand row ↓
8.1High
0.44%
CWE-89 Version matches source range* BSI CSAF 3 resolved adv
8 products (11 criteria)
›
Vendor statements are preserved separately from CISA advisories. A product must match the advisory's affected version conditions before treating it as vulnerable.
www_bsi_bund_de · WID-SEC-W-2026-1433 — PHP: Mehrere Schwachstellen Read CSAF ↗
www_bsi_bund_de · WID-SEC-W-2026-2455 — Oracle Solaris Drittanbieterkomponenten: Mehrere Schwachstellen Read CSAF ↗
First published: 2026-05-10 03:51 UTC · CVE record last modified: 2026-05-10 03:51 UTC
SQL injection in pdo_firebird via NUL bytes in quoted strings
Listed as affected (NVD criteria)
Advisories & activity
Indexed in
Raw evidence & CPE identifiers
cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cve: title=SQL injection in pdo_firebird via NUL bytes in quoted strings;
epss: percentile=0.36691;
vulnrichment: title=SQL injection in pdo_firebird via NUL bytes in quoted strings; published=2026-05-10T03:51:14.596Z;
CVSS from cve (cvss_score)
CVE-2026-17543
SQL injection in ext-pgsql via E'...' backslash breakoutNVD lists: Software: php / php (≥ 8.2.0 < 8.2.33 / ≥ 8.3.0 < 8.3.33), Software: PHP Group / PHP
8.1High
0.33%
CWE-89 Version matches source range* BSI CSAF 3 resolved adv
2 products (5 criteria)
›
Vendor statements are preserved separately from CISA advisories. A product must match the advisory's affected version conditions before treating it as vulnerable.
www_bsi_bund_de · WID-SEC-W-2026-2598 — PHP: Mehrere Schwachstellen Read CSAF ↗
First published: 2026-07-30 11:22 UTC · CVE record last modified: 2026-07-30 11:33 UTC
SQL injection in ext-pgsql via E'...' backslash breakout
Listed as affected (NVD criteria)
Advisories & activity
Indexed in
Raw evidence & CPE identifiers
cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cve: title=SQL injection in ext-pgsql via E'...' backslash breakout;
epss: percentile=0.2457;
vulnrichment: title=SQL injection in ext-pgsql via E'...' backslash breakout; published=2026-07-30T11:22:04.549Z;
CVSS from cve (cvss_score)
CVE-2026-17544
Out-of-bounds write in bccomp() via crafted operand and scaleNVD lists: Software: php / php (≥ 8.4.0 < 8.4.24 / ≥ 8.5.0 < 8.5.9), Software: PHP Group / PHP
8.1High
0.43%
CWE-787 Version matches source range* BSI CSAF 3 resolved adv
2 products (3 criteria)
›
Vendor statements are preserved separately from CISA advisories. A product must match the advisory's affected version conditions before treating it as vulnerable.
www_bsi_bund_de · WID-SEC-W-2026-2598 — PHP: Mehrere Schwachstellen Read CSAF ↗
www_bsi_bund_de · WID-SEC-W-2026-3403 — Oracle Communications: Mehrere Schwachstellen Read CSAF ↗
First published: 2026-07-30 11:22 UTC · CVE record last modified: 2026-07-30 11:22 UTC
Out-of-bounds write in bccomp() via crafted operand and scale
Listed as affected (NVD criteria)
Advisories & activity
Indexed in
Raw evidence & CPE identifiers
cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cve: title=Out-of-bounds write in bccomp() via crafted operand and scale;
epss: percentile=0.35461;
vulnrichment: title=Out-of-bounds write in bccomp() via crafted operand and scale; published=2026-07-30T11:22:24.023Z;
CVSS from cve (cvss_score)
CVE-2026-7262
NULL pointer dereference in SOAP apache:Map decoder with missing <value>NVD lists: Software: php / php (≥ 8.2.0 < 8.2.31 / ≥ 8.3.0 < 8.3.31), Software: PHP Group / PHP, Software: Red Hat / Red Hat Enterprise Linux 7 · +5 more affected products — expand row ↓
7.5High
1.05%
CWE-476 Version matches source range* BSI CSAF 3 resolved adv
8 products (11 criteria)
›
Vendor statements are preserved separately from CISA advisories. A product must match the advisory's affected version conditions before treating it as vulnerable.
www_bsi_bund_de · WID-SEC-W-2026-1433 — PHP: Mehrere Schwachstellen Read CSAF ↗
www_bsi_bund_de · WID-SEC-W-2026-2455 — Oracle Solaris Drittanbieterkomponenten: Mehrere Schwachstellen Read CSAF ↗
First published: 2026-05-10 04:00 UTC · CVE record last modified: 2026-05-10 04:00 UTC
NULL pointer dereference in SOAP apache:Map decoder with missing <value>
Listed as affected (NVD criteria)
Advisories & activity
Indexed in
Raw evidence & CPE identifiers
cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cve: title=NULL pointer dereference in SOAP apache:Map decoder with missing <value>;
epss: percentile=0.63597;
vulnrichment: title=NULL pointer dereference in SOAP apache:Map decoder with missing <value>; published=2026-05-10T04:00:09.382Z;
CVSS from cve (cvss_score)
CVE-2026-7263
DoS attack via DOMNode::C14N()NVD lists: Software: php / php (≥ 8.4.0 < 8.4.21 / ≥ 8.5.0 < 8.5.6), Software: PHP Group / PHP, Software: Red Hat / Red Hat Enterprise Linux 9 · +5 more affected products — expand row ↓
7.5High
0.63%
CWE-835CWE-404 Version matches source range* BSI CSAF 3 resolved adv Threat activity reference
8 products (9 criteria)
›
Vendor statements are preserved separately from CISA advisories. A product must match the advisory's affected version conditions before treating it as vulnerable.
www_bsi_bund_de · WID-SEC-W-2026-1433 — PHP: Mehrere Schwachstellen Read CSAF ↗
www_bsi_bund_de · WID-SEC-W-2026-2455 — Oracle Solaris Drittanbieterkomponenten: Mehrere Schwachstellen Read CSAF ↗
First published: 2026-05-10 04:43 UTC · CVE record last modified: 2026-05-10 04:46 UTC
DoS attack via DOMNode::C14N()
Listed as affected (NVD criteria)
Advisories & activity
Indexed in
Raw evidence & CPE identifiers
cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cve: title=DoS attack via DOMNode::C14N();
epss: percentile=0.49123;
vulnrichment: title=DoS attack via DOMNode::C14N(); published=2026-05-10T04:43:04.483Z;
CVSS from cve (cvss_score)
CVE-2026-7568
Signed integer overflow in metaphone()NVD lists: Software: php / php (≥ 8.2.0 < 8.2.31 / ≥ 8.3.0 < 8.3.31), Software: PHP Group / PHP, Software: Red Hat / Red Hat Enterprise Linux 7 · +5 more affected products — expand row ↓
7.5High
0.84%
CWE-190CWE-125 Version matches source range* BSI CSAF 3 resolved adv
8 products (11 criteria)
›
Vendor statements are preserved separately from CISA advisories. A product must match the advisory's affected version conditions before treating it as vulnerable.
www_bsi_bund_de · WID-SEC-W-2026-1433 — PHP: Mehrere Schwachstellen Read CSAF ↗
www_bsi_bund_de · WID-SEC-W-2026-2455 — Oracle Solaris Drittanbieterkomponenten: Mehrere Schwachstellen Read CSAF ↗
First published: 2026-05-10 03:42 UTC · CVE record last modified: 2026-05-10 04:44 UTC
Signed integer overflow in metaphone()
Listed as affected (NVD criteria)
Advisories & activity
Indexed in
Raw evidence & CPE identifiers
cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cve: title=Signed integer overflow in metaphone();
epss: percentile=0.57059;
vulnrichment: title=Signed integer overflow in metaphone(); published=2026-05-10T03:42:36.433Z;
CVSS from cve (cvss_score)
CVE-2026-6735
XSS within PHP-FPM status endpointNVD lists: Software: php / php (≥ 8.2.0 < 8.2.31 / ≥ 8.3.0 < 8.3.31), Software: PHP Group / PHP
7.3High
0.31%
CWE-79 Version matches source range* BSI CSAF 2 resolved adv
2 products (5 criteria)
›
Vendor statements are preserved separately from CISA advisories. A product must match the advisory's affected version conditions before treating it as vulnerable.
www_bsi_bund_de · WID-SEC-W-2026-1433 — PHP: Mehrere Schwachstellen Read CSAF ↗
www_bsi_bund_de · WID-SEC-W-2026-2455 — Oracle Solaris Drittanbieterkomponenten: Mehrere Schwachstellen Read CSAF ↗
First published: 2026-05-10 03:27 UTC · CVE record last modified: 2026-05-10 03:27 UTC
XSS within PHP-FPM status endpoint
Listed as affected (NVD criteria)
Advisories & activity
Indexed in
Raw evidence & CPE identifiers
cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cve: title=XSS within PHP-FPM status endpoint;
epss: percentile=0.22235;
vulnrichment: title=XSS within PHP-FPM status endpoint; published=2026-05-10T03:27:00.607Z;
CVSS from cve (cvss_score)
CVE-2025-14178
Heap buffer overflow in array_merge()NVD lists: Software: php / php (≥ 8.1.0 < 8.1.34 / ≥ 8.2.0 < 8.2.30), Software: PHP Group / PHP
6.5Medium
0.46%
CWE-190CWE-787 Version matches source range* BSI CSAF 2 resolved adv
2 products (6 criteria)
›
Vendor statements are preserved separately from CISA advisories. A product must match the advisory's affected version conditions before treating it as vulnerable.
www_bsi_bund_de · WID-SEC-W-2025-2887 — PHP: Mehrere Schwachstellen Read CSAF ↗
www_bsi_bund_de · WID-SEC-W-2026-1730 — Xerox FreeFlow Print Server: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff Read CSAF ↗
First published: 2025-12-27 19:27 UTC · CVE record last modified: 2025-12-27 19:27 UTC
Heap buffer overflow in array_merge()
Listed as affected (NVD criteria)
Advisories & activity
Indexed in
Raw evidence & CPE identifiers
cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cve: title=Heap buffer overflow in array_merge();
epss: percentile=0.38331;
vulnrichment: title=Heap buffer overflow in array_merge(); published=2025-12-27T19:27:41.691Z;
CVSS from cve (cvss_score)
CVE-2025-1217
Header parser of http stream wrapper does not handle folded headersNVD lists: Software: php / php (≥ 8.1.0 < 8.1.32 / ≥ 8.2.0 < 8.2.28), Software: PHP Group / PHP
6.3Medium
0.57%
CWE-20 Version matches source range* BSI CSAF —
2 products (5 criteria)
›
Vendor statements are preserved separately from CISA advisories. A product must match the advisory's affected version conditions before treating it as vulnerable.
www_bsi_bund_de · WID-SEC-W-2025-0566 — PHP: Mehrere Schwachstellen Read CSAF ↗
First published: 2025-03-29 05:19 UTC · CVE record last modified: 2025-03-30 05:33 UTC
Header parser of http stream wrapper does not handle folded headers
Listed as affected (NVD criteria)
Advisories & activity
No advisory or campaign record resolved in the bounded lookup.
Indexed in
Raw evidence & CPE identifiers
cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cve: title=Header parser of http stream wrapper does not handle folded headers;
epss: percentile=0.46197;
vulnrichment: title=Header parser of http stream wrapper does not handle folded headers; published=2025-03-29T05:19:33.696Z;
CVSS from cve (cvss_score)
CVE-2025-1219
libxml streams use wrong content-type header when requesting a redirected resourceNVD lists: Software: php / php (≥ 8.1.0 < 8.1.32 / ≥ 8.2.0 < 8.2.28), Software: PHP Group / PHP
6.3Medium
0.73%
CWE-1116 Version matches source range* BSI CSAF —
2 products (5 criteria)
›
Vendor statements are preserved separately from CISA advisories. A product must match the advisory's affected version conditions before treating it as vulnerable.
www_bsi_bund_de · WID-SEC-W-2025-0566 — PHP: Mehrere Schwachstellen Read CSAF ↗
First published: 2025-03-30 05:33 UTC · CVE record last modified: 2025-03-30 05:33 UTC
libxml streams use wrong content-type header when requesting a redirected resource
Listed as affected (NVD criteria)
Advisories & activity
No advisory or campaign record resolved in the bounded lookup.
Indexed in
Raw evidence & CPE identifiers
cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cve: title=libxml streams use wrong content-type header when requesting a redirected resource;
epss: percentile=0.53529;
vulnrichment: title=libxml streams use wrong content-type header when requesting a redirected resource; published=2025-03-30T05:33:13.801Z;
CVSS from cve (cvss_score)
CVE-2025-14177
Information Leak of Memory in getimagesizeNVD lists: Software: php / php (≥ 8.1.0 < 8.1.34 / ≥ 8.2.0 < 8.2.30), Software: PHP Group / PHP
6.3Medium
0.51%
CWE-125 Version matches source range* BSI CSAF 2 resolved adv
2 products (6 criteria)
›
Vendor statements are preserved separately from CISA advisories. A product must match the advisory's affected version conditions before treating it as vulnerable.
www_bsi_bund_de · WID-SEC-W-2025-2887 — PHP: Mehrere Schwachstellen Read CSAF ↗
www_bsi_bund_de · WID-SEC-W-2026-1730 — Xerox FreeFlow Print Server: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff Read CSAF ↗
First published: 2025-12-27 19:33 UTC · CVE record last modified: 2025-12-27 19:33 UTC
Information Leak of Memory in getimagesize
Listed as affected (NVD criteria)
Advisories & activity
Indexed in
Raw evidence & CPE identifiers
cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:8.5.0:*:*:*:*:*:*:*cve: title=Information Leak of Memory in getimagesize;
epss: percentile=0.42113;
vulnrichment: title=Information Leak of Memory in getimagesize; published=2025-12-27T19:33:23.973Z;
CVSS from cve (cvss_score)
CVE-2025-1734
Streams HTTP wrapper does not fail for headers with invalid name and no colonNVD lists: Software: php / php (≥ 8.1.0 < 8.1.32 / ≥ 8.2.0 < 8.2.28), Software: netapp / ontap (9), Software: PHP Group / PHP
6.3Medium
0.49%
CWE-20 Version matches source range* BSI CSAF —
3 products (6 criteria)
›
Vendor statements are preserved separately from CISA advisories. A product must match the advisory's affected version conditions before treating it as vulnerable.
www_bsi_bund_de · WID-SEC-W-2025-0566 — PHP: Mehrere Schwachstellen Read CSAF ↗
First published: 2025-03-30 05:43 UTC · CVE record last modified: 2025-03-30 05:43 UTC
Streams HTTP wrapper does not fail for headers with invalid name and no colon
Listed as affected (NVD criteria)
Advisories & activity
No advisory or campaign record resolved in the bounded lookup.
Indexed in
Raw evidence & CPE identifiers
cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:netapp:ontap:9:*:*:*:*:*:*:*cve: title=Streams HTTP wrapper does not fail for headers with invalid name and no colon;
epss: percentile=0.40919;
vulnrichment: title=Streams HTTP wrapper does not fail for headers with invalid name and no colon; published=2025-03-30T05:43:35.771Z;
CVSS from cve (cvss_score)
CVE-2025-1736
Stream HTTP wrapper header check might omit basic auth headerNVD lists: Software: php / php (≥ 8.1.0 < 8.1.32 / ≥ 8.2.0 < 8.2.28), Software: netapp / ontap (9), Software: PHP Group / PHP
6.3Medium
0.54%
CWE-20 Version matches source range* BSI CSAF —
3 products (6 criteria)
›
Vendor statements are preserved separately from CISA advisories. A product must match the advisory's affected version conditions before treating it as vulnerable.
www_bsi_bund_de · WID-SEC-W-2025-0566 — PHP: Mehrere Schwachstellen Read CSAF ↗
First published: 2025-03-30 05:49 UTC · CVE record last modified: 2025-03-30 05:49 UTC
Stream HTTP wrapper header check might omit basic auth header
Listed as affected (NVD criteria)
Advisories & activity
No advisory or campaign record resolved in the bounded lookup.
Indexed in
Raw evidence & CPE identifiers
cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:netapp:ontap:9:*:*:*:*:*:*:*cve: title=Stream HTTP wrapper header check might omit basic auth header;
epss: percentile=0.44414;
vulnrichment: title=Stream HTTP wrapper header check might omit basic auth header; published=2025-03-30T05:49:14.551Z;
CVSS from cve (cvss_score)
CVE-2025-1861
Stream HTTP wrapper truncates redirect location to 1024 bytesNVD lists: Software: php / php (≥ 8.1.0 < 8.1.31 / ≥ 8.2.0 < 8.2.26), Software: netapp / ontap (9), Software: PHP Group / PHP
6.3Medium
0.84%
CWE-131 Version matches source range* BSI CSAF —
3 products (6 criteria)
›
Vendor statements are preserved separately from CISA advisories. A product must match the advisory's affected version conditions before treating it as vulnerable.
www_bsi_bund_de · WID-SEC-W-2025-0566 — PHP: Mehrere Schwachstellen Read CSAF ↗
First published: 2025-03-30 05:57 UTC · CVE record last modified: 2025-03-30 05:57 UTC
Stream HTTP wrapper truncates redirect location to 1024 bytes
Listed as affected (NVD criteria)
Advisories & activity
No advisory or campaign record resolved in the bounded lookup.
Indexed in
Raw evidence & CPE identifiers
cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:netapp:ontap:9:*:*:*:*:*:*:*cve: title=Stream HTTP wrapper truncates redirect location to 1024 bytes;
epss: percentile=0.57067;
vulnrichment: title=Stream HTTP wrapper truncates redirect location to 1024 bytes; published=2025-03-30T05:57:57.894Z;
CVSS from cve (cvss_score)
CVE-2026-7258
Out-of-bounds read in urldecode() on NetBSDNVD lists: Software: php / php (≥ 8.2.0 < 8.2.21 / ≥ 8.3.0 < 8.3.31), Software: PHP Group / PHP
6.3Medium
0.41%
CWE-125 Version matches source range* BSI CSAF —
2 products (5 criteria)
›
Vendor statements are preserved separately from CISA advisories. A product must match the advisory's affected version conditions before treating it as vulnerable.
www_bsi_bund_de · WID-SEC-W-2026-1433 — PHP: Mehrere Schwachstellen Read CSAF ↗
www_bsi_bund_de · WID-SEC-W-2026-2455 — Oracle Solaris Drittanbieterkomponenten: Mehrere Schwachstellen Read CSAF ↗
First published: 2026-05-10 04:28 UTC · CVE record last modified: 2026-05-10 04:45 UTC
Out-of-bounds read in urldecode() on NetBSD
Listed as affected (NVD criteria)
Advisories & activity
No advisory or campaign record resolved in the bounded lookup.
Indexed in
Raw evidence & CPE identifiers
cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cve: title=Out-of-bounds read in urldecode() on NetBSD;
epss: percentile=0.33232;
vulnrichment: title=Out-of-bounds read in urldecode() on NetBSD; published=2026-05-10T04:28:14.520Z;
CVSS from cve (cvss_score)
CVE-2026-7261
SoapServer session-persisted object use-after-free via SOAP header faultNVD lists: Software: php / php (≥ 8.2.0 < 8.2.31 / ≥ 8.3.0 < 8.3.31), Software: PHP Group / PHP
6.3Medium
0.53%
CWE-416 Version matches source range* BSI CSAF —
2 products (5 criteria)
›
Vendor statements are preserved separately from CISA advisories. A product must match the advisory's affected version conditions before treating it as vulnerable.
www_bsi_bund_de · WID-SEC-W-2026-1433 — PHP: Mehrere Schwachstellen Read CSAF ↗
www_bsi_bund_de · WID-SEC-W-2026-2455 — Oracle Solaris Drittanbieterkomponenten: Mehrere Schwachstellen Read CSAF ↗
First published: 2026-05-10 04:07 UTC · CVE record last modified: 2026-05-10 04:07 UTC
SoapServer session-persisted object use-after-free via SOAP header fault
Listed as affected (NVD criteria)
Advisories & activity
No advisory or campaign record resolved in the bounded lookup.
Indexed in
Raw evidence & CPE identifiers
cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cve: title=SoapServer session-persisted object use-after-free via SOAP header fault;
epss: percentile=0.43644;
vulnrichment: title=SoapServer session-persisted object use-after-free via SOAP header fault; published=2026-05-10T04:07:25.484Z;
CVSS from cve (cvss_score)
CVE-2025-1735
pgsql extension does not check for errors during escapingNVD lists: Software: php / php (≥ 8.1.0 < 8.1.33 / ≥ 8.2.0 < 8.2.29), Software: PHP Group / PHP
5.9Medium
1.00%
CWE-476CWE-89 Version matches source range* BSI CSAF 3 resolved adv
2 products (5 criteria)
›
Vendor statements are preserved separately from CISA advisories. A product must match the advisory's affected version conditions before treating it as vulnerable.
www_bsi_bund_de · WID-SEC-W-2025-1460 — PHP: Mehrere Schwachstellen Read CSAF ↗
First published: 2025-07-13 22:27 UTC · CVE record last modified: 2025-07-13 22:27 UTC
pgsql extension does not check for errors during escaping
Listed as affected (NVD criteria)
Advisories & activity
Indexed in
Raw evidence & CPE identifiers
cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cve: title=pgsql extension does not check for errors during escaping;
epss: percentile=0.62169;
vulnrichment: title=pgsql extension does not check for errors during escaping; published=2025-07-13T22:27:48.299Z;
CVSS from cve (cvss_score)
CVE-2025-6491
NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace PrefixNVD lists: Software: php / php (≥ 8.1.0 < 8.1.33 / ≥ 8.2.0 < 8.2.29), Software: PHP Group / PHP
5.9Medium
0.99%
CWE-476 Version matches source range* BSI CSAF 3 resolved adv
2 products (5 criteria)
›
Vendor statements are preserved separately from CISA advisories. A product must match the advisory's affected version conditions before treating it as vulnerable.
www_bsi_bund_de · WID-SEC-W-2025-1460 — PHP: Mehrere Schwachstellen Read CSAF ↗
www_bsi_bund_de · WID-SEC-W-2026-2437 — Oracle Communications: Mehrere Schwachstellen Read CSAF ↗
First published: 2025-07-13 22:10 UTC · CVE record last modified: 2025-07-13 22:10 UTC
NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix
Listed as affected (NVD criteria)
Advisories & activity
Indexed in
Raw evidence & CPE identifiers
cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cve: title=NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix;
epss: percentile=0.6187;
vulnrichment: title=NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix; published=2025-07-13T22:10:15.996Z;
CVSS from cve (cvss_score)
CVE-2026-14355
ext/openssl: Memory corruption in openssl_encrypt with AES-WRAP-PADNVD lists: Operating system: debian / debian linux (12.0), Software: php / php (≥ 8.2.0 < 8.2.32 / ≥ 8.3.0 < 8.3.32)
5.6Medium
0.28%
CWE-122 Version matches source range* BSI CSAF —
2 products (6 criteria)
›
Vendor statements are preserved separately from CISA advisories. A product must match the advisory's affected version conditions before treating it as vulnerable.
www_bsi_bund_de · WID-SEC-W-2026-2186 — PHP: Mehrere Schwachstellen ermöglichen Denial of Service Read CSAF ↗
First published: 2026-07-03 20:57 UTC · CVE record last modified: 2026-07-03 20:59 UTC
ext/openssl: Memory corruption in openssl_encrypt with AES-WRAP-PAD
Listed as affected (NVD criteria)
Advisories & activity
No advisory or campaign record resolved in the bounded lookup.
Indexed in
Raw evidence & CPE identifiers
cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*cve: title=ext/openssl: Memory corruption in openssl_encrypt with AES-WRAP-PAD;
epss: percentile=0.19039;
vulnrichment: title=ext/openssl: Memory corruption in openssl_encrypt with AES-WRAP-PAD; published=2026-07-03T20:57:31.958Z;
CVSS from cve (cvss_score)
CVE-2026-7260
Stack overflow in phar with circular symlinksNVD lists: Software: php / php (≥ 8.2.0 < 8.2.33 / ≥ 8.3.0 < 8.3.33), Software: PHP Group / PHP
5.4Medium
0.15%
CWE-121 Version matches source range* BSI CSAF —
2 products (5 criteria)
›
Vendor statements are preserved separately from CISA advisories. A product must match the advisory's affected version conditions before treating it as vulnerable.
www_bsi_bund_de · WID-SEC-W-2026-2598 — PHP: Mehrere Schwachstellen Read CSAF ↗
First published: 2026-07-30 11:22 UTC · CVE record last modified: 2026-07-30 11:22 UTC
Stack overflow in phar with circular symlinks
Listed as affected (NVD criteria)
Advisories & activity
No advisory or campaign record resolved in the bounded lookup.
Indexed in
Raw evidence & CPE identifiers
cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cve: title=Stack overflow in phar with circular symlinks;
epss: percentile=0.03605;
vulnrichment: title=Stack overflow in phar with circular symlinks; published=2026-07-30T11:22:53.918Z;
CVSS from cve (cvss_score)
CVE-2025-1220
Null byte termination in hostnamesNVD lists: Software: php / php (≥ 8.1.0 < 8.1.33 / ≥ 8.2.0 < 8.2.29), Software: PHP Group / PHP
3.7Low
0.64%
CWE-918 Version matches source range* BSI CSAF 3 resolved adv
2 products (5 criteria)
›
Vendor statements are preserved separately from CISA advisories. A product must match the advisory's affected version conditions before treating it as vulnerable.
www_bsi_bund_de · WID-SEC-W-2025-1460 — PHP: Mehrere Schwachstellen Read CSAF ↗
First published: 2025-07-13 22:18 UTC · CVE record last modified: 2025-07-13 22:18 UTC
Null byte termination in hostnames
Listed as affected (NVD criteria)
Advisories & activity
Indexed in
Raw evidence & CPE identifiers
cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cve: title=Null byte termination in hostnames;
epss: percentile=0.49612;
vulnrichment: title=Null byte termination in hostnames; published=2025-07-13T22:18:36.974Z;
CVSS from cve (cvss_score)
CVE-2026-7259
Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init()NVD lists: Software: php / php (≥ 8.2.0 < 8.2.31 / ≥ 8.3.0 < 8.3.31), Software: PHP Group / PHP
2.1Low
0.35%
CWE-476 Version matches source range* BSI CSAF —
2 products (5 criteria)
›
Vendor statements are preserved separately from CISA advisories. A product must match the advisory's affected version conditions before treating it as vulnerable.
www_bsi_bund_de · WID-SEC-W-2026-1433 — PHP: Mehrere Schwachstellen Read CSAF ↗
www_bsi_bund_de · WID-SEC-W-2026-2455 — Oracle Solaris Drittanbieterkomponenten: Mehrere Schwachstellen Read CSAF ↗
First published: 2026-05-10 04:13 UTC · CVE record last modified: 2026-05-10 04:13 UTC
Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init()
Listed as affected (NVD criteria)
Advisories & activity
No advisory or campaign record resolved in the bounded lookup.
Indexed in
Raw evidence & CPE identifiers
cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cpe:2.3:a:php:php:*:*:*:*:*:*:*:*cve: title=Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init();
epss: percentile=0.26506;
vulnrichment: title=Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init(); published=2026-05-10T04:13:26.766Z;
CVSS from cve (cvss_score)
Version intelligence · 8.4
NVD CPE criteria plus canonical catalog version assertions; full configuration applicability is not evaluatedA matching CPE criterion is not proof of vulnerability: AND/OR configurations, negation, environment and model identity still require validation. Missing matches do not establish safety.
Lifecycle relationships
Scantide local lifecycle evidenceLifecycle evidence is independent of CVE applicability. Listed support dates apply only to the scope of the underlying lifecycle record.
What else these CVEs list as affected
26 of 106 CVEs examined · partialFirmware 0
None in examined scope.
Hardware 0
None in examined scope.
NVD co-listing shows products appearing in the same vulnerability configurations. It does not prove that php is embedded, that a dependency exists, or that an installed release is vulnerable.
Advisories & campaigns
Page-specific advisories; campaign graph restricted to the matching-version CVE set. Actor co-mentions are not confirmed exploitation.Campaign intelligence
26 CVEs checked in the selected version’s matched criteria. Source co-mention is not confirmed actor exploitation.
Published graph 20261009T152843Z-a7745f57 · 26 CVEs checked · 0 evidence edges
No actor evidence edges in the examined CVE scope.
Associations are source-backed co-mentions, not attribution or proof of exploitation.
CVEs referenced per source family (whole enriched set)
| Exploit references | 0 | |
| Security & vendor advisories | 26 | ubuntu 26, euvd 26, redhat 25, oracle_cpu 6 |
| GitHub / OSV | 26 | osv 26 |
| Operational intel (IC3, Europol, CrowdSec) | 0 |
Source records by feed 47
osv32 records
oracle_cpu15 records
All identities for “PHP”
Same-name products may belong to different vendors. Purple = shares CVEs with the selected product. Additional family candidates are separately identified.Default-credential intelligence
Independent security configuration evidence · not vulnerability applicability · 0 visible CVEs with affected-product identity matchesLook for documented default usernames, blank passwords, setup-required credentials and device-specific credential practices associated with this vendor or product. The on-demand lookup displays explicitly disclosed default credentials with provenance; unreviewed and withheld secrets stay hidden.
Full credential catalog ↗Evidence coverage & limitations 4 caveats · 9 sources contributing
Source index hits (enriched set)
What this view can and cannot establish
| Advisories & campaigns | Resolved source records with IDs, publisher, dates and links. Campaign names come from a precooked cache and are not attribution. |
| Relationships | Search identities and CPE co-listings are correlations. Embedding, forks, dependencies and distribution need explicit source evidence and are never inferred. |
| Versions & fixes | NVD match ranges where available. Simple numeric version-range comparisons are shown where indexed. Fixed releases and full AND/OR applicability remain unevaluated. |
| Exposure scope | 26 / 106 CVEs checked (page). 1,000-CVE enrichment cap, 256 criteria per CVE. |
| Lifecycle | Matched against Scantide local lifecycle alias/product records. Release-specific status only shown when the record explicitly names that release. |
| Threat techniques | CWE shown where indexed. ATT&CK / CAPEC mapping needs validated edges. |
| Absence | Empty indexes never imply absence. KEV “no” means no record in the active index. |