PHP Group vulnerabilities
104 CVEs and advisories name PHP Group as an affected vendor, 3 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-109619RCE via stale global state
- CVE-2026-109618RCE via OOM corruption
- CVE-2026-92842OOB read / info leak in convert.* stream filters when line-break-chars contains NUL
- CVE-2026-91768IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison (memcmp 12 bytes)
- CVE-2026-91769TLS Hostname Verification Falls Back to CN After SAN Mismatch
- CVE-2026-91767Heap-buffer-overflow in php_openssl_matches_wildcard_name on crafted server cert wildcard CN
- CVE-2025-1218Various packet overreads in mysqlnd_writeprotocol.c
- CVE-2026-91766Cross-origin credential leak in HTTP stream wrapper redirects
- CVE-2026-91765SOAP: Unbounded Recursion in Server-Side cleanup_xml_node
- CVE-2025-14181Integer overflow to buffer overflow in soap HTTP parsing
- CVE-2026-17545PHP on Windows: Reserved Device Names Are Not Rejected Before File/Stream I/O which can cause DoS
- CVE-2026-6103Phar TAR phar_tar_number() Integer Overflow - Archive Entry Injection
- CVE-2026-93682Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
- CVE-2026-7260Stack overflow in phar with circular symlinks
- CVE-2026-17544Out-of-bounds write in bccomp() via crafted operand and scale
- CVE-2026-17543SQL injection in ext-pgsql via E'...' backslash breakout
- CVE-2026-7263DoS attack via DOMNode::C14N()
- CVE-2026-6104Global buffer over-read in mb_convert_encoding() with attacker-supplied encoding
- CVE-2026-7258Out-of-bounds read in urldecode() on NetBSD
- CVE-2026-6722Use-After-Free in SOAP using Apache map
- CVE-2026-7259Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init()
- CVE-2026-7261SoapServer session-persisted object use-after-free via SOAP header fault
- CVE-2026-7262NULL pointer dereference in SOAP apache:Map decoder with missing <value>
- CVE-2025-14179SQL injection in pdo_firebird via NUL bytes in quoted strings
- CVE-2026-7568Signed integer overflow in metaphone()
- CVE-2026-6735XSS within PHP-FPM status endpoint
- CVE-2025-14177Information Leak of Memory in getimagesize
- CVE-2025-14178Heap buffer overflow in array_merge()
- CVE-2025-14180NULL Pointer Dereference in PDO quoting
- CVE-2025-1735pgsql extension does not check for errors during escaping