Vulnerabilities in PHP Group
104 resultsCVE-2024-9026LOWPHP-FPM logs from children may be alteredEPSS 0.5%CVE-2026-6104MEDIUMGlobal buffer over-read in mb_convert_encoding() with attacker-supplied encodingEPSS 0.5%CVE-2025-14178MEDIUMHeap buffer overflow in array_merge()EPSS 0.5%CVE-2026-7568MEDIUMSigned integer overflow in metaphone()EPSS 0.5%CVE-2025-14179HIGHSQL injection in pdo_firebird via NUL bytes in quoted stringsEPSS 0.4%CVE-2026-17544HIGHOut-of-bounds write in bccomp() via crafted operand and scaleEPSS 0.4%CVE-2026-91765HIGHSOAP: Unbounded Recursion in Server-Side cleanup_xml_nodeEPSS 0.4%CVE-2026-91768MEDIUMIPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison (memcmp 12 bytes)EPSS 0.4%CVE-2026-17545MEDIUMPHP on Windows: Reserved Device Names Are Not Rejected Before File/Stream I/O which can cause DoSEPSS 0.4%CVE-2026-7258MEDIUMOut-of-bounds read in urldecode() on NetBSDEPSS 0.4%CVE-2026-7263MEDIUMDoS attack via DOMNode::C14N()EPSS 0.4%CVE-2026-93682MEDIUMOut-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location headerEPSS 0.3%CVE-2026-17543HIGHSQL injection in ext-pgsql via E'...' backslash breakoutEPSS 0.3%CVE-2025-14181MEDIUMInteger overflow to buffer overflow in soap HTTP parsingEPSS 0.3%CVE-2026-7261MEDIUMSoapServer session-persisted object use-after-free via SOAP header faultEPSS 0.3%CVE-2026-91766MEDIUMCross-origin credential leak in HTTP stream wrapper redirectsEPSS 0.3%CVE-2025-1218LOWVarious packet overreads in mysqlnd_writeprotocol.cEPSS 0.3%CVE-2026-92842MEDIUMOOB read / info leak in convert.* stream filters when line-break-chars contains NULEPSS 0.3%CVE-2026-6735HIGHXSS within PHP-FPM status endpointEPSS 0.2%CVE-2026-7259LOWNull pointer dereference in php_mb_check_encoding() via mb_ereg_search_init()EPSS 0.2%