DoS attack via DOMNode::C14N()
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 6.3epss 0.4%
probabilidad de explotación
0.4%top 72% de las CVE
explotación observada
noninguna fuente lo reporta
In PHP versions 8.4.* before 8.4.21 and 8.5.* before 8.5.6, DOMNode::C14N() method may process the XML data incorrectly, causing a circular linked list in the data structure representing the XML document. This may cause subsequent processing of the XML document to enter infinite loop, causing denial of service in the processing application.
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/AU:Y/RE:M/U:Amber
Productos afectados
PHP Group · PHPReferencias
https://access.redhat.com/errata/RHSA-2026:22649https://access.redhat.com/security/cve/CVE-2026-7263https://bugzilla.redhat.com/show_bug.cgi?id=2468572https://github.com/php/php-src/security/advisories/GHSA-4jhr-8w89-j733https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-7263.json