PHP Multiple Vulnerabilities

Release Date:

3 Aug 2026

498

Views

RISK: Medium Risk

TYPE: Servers - Internet App Servers

Multiple vulnerabilities were identified in PHP. A remote attacker could exploit some of these vulnerabilities to trigger remote code execution, security restriction bypass, denial of service condition, sensitive information disclosure and data manipulation on the targeted system.

Impact

- Remote Code Execution

- Security Restriction Bypass

- Data Manipulation

- Denial of Service

- Information Disclosure

System / Technologies affected

- PHP version prior to 8.5.9

- PHP version prior to 8.4.24

- PHP version prior to 8.3.33

- PHP version prior to 8.2.33

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

The vendor has issued a fix:

- PHP 8.5.9

- PHP 8.4.24

- PHP 8.3.33

- PHP 8.2.33

Vulnerability Identifier

Source