Vulnerabilities

CVSS

8.1 High

Vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N

Risk score

64.8

Published

2026-07-30

Status

Published

Attacker-provided inputs to bccomp() could lead to an out-of-bounds write with stack and heap corruption in PHP versions from 8.4.* before 8.4.24 and from 8.5.* before 8.5.9.

Weaknesses

CWE-787

Coverage 1

vulnerability

Multiples vulnérabilités dans PHP (31 juillet 2026)

Multiple vulnerabilities have been discovered in PHP versions 8.2, 8.3, 8.4, and 8.5, including SQL injection and denial of service attacks. Users are strongly advised to apply the security updates released by PHP’s publ…

CERT-FR · Jul 31, 2026 Medium

CVE-2026-17543CVE-2026-17544CVE-2026-7260phpvulnerabilitysql injection

All articles mentioning it

Advisories and references

• github.com/php/php-src/security/advisories/GHSA-x692-q9x7-8c3f