Vulnerabilities

CVSS

8.1 High

Vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:Y/R:U

Risk score

64.8

Published

2026-07-30

Status

Published

Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9.

Weaknesses

CWE-89

Coverage 1

vulnerability

Multiples vulnérabilités dans PHP (31 juillet 2026)

Multiple vulnerabilities have been discovered in PHP versions 8.2, 8.3, 8.4, and 8.5, including SQL injection and denial of service attacks. Users are strongly advised to apply the security updates released by PHP’s publ…

CERT-FR · Jul 31, 2026 Medium

CVE-2026-17543CVE-2026-17544CVE-2026-7260phpvulnerabilitysql injection

All articles mentioning it

Advisories and references

• github.com/php/php-src/security/advisories/GHSA-7qpv-r5mr-78m4