Search CVE reports


Toggle filters

1 – 10 of 57 results


CVE-2026-17545

Medium priority
Needs evaluation

On Windows, PHP's filesystem and stream APIs do not reject reserved device names such as CON, PRN, AUX, NUL, COM1 to COM9, LPT1 to LPT9, CONIN$ and CONOUT$ when they appear as a component of a path. An attacker-controlled filename...

7 affected packages

php5, php7.0, php7.2, php7.4, php8.1...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
php5 Not in release Not in release Not in release — —
php7.0 Not in release Not in release Not in release — —
php7.2 Not in release Not in release Not in release — Needs evaluation
php7.4 Not in release Not in release Not in release Needs evaluation —
php8.1 Not in release Not in release Needs evaluation — —
php8.3 Not in release Needs evaluation Not in release — —
php8.5 Needs evaluation Not in release Not in release — —
Show all 7 packages Show less packages

CVE-2025-14181

Medium priority
Needs evaluation

The SOAP HTTP client guards its response buffer growth with a check that relies on signed integer overflow, which is undefined behaviour and is not guaranteed to trigger. When the check is optimised away, a malicious SOAP server...

7 affected packages

php5, php7.0, php7.2, php7.4, php8.1...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
php5 Not in release Not in release Not in release — —
php7.0 Not in release Not in release Not in release — —
php7.2 Not in release Not in release Not in release — Needs evaluation
php7.4 Not in release Not in release Not in release Needs evaluation —
php8.1 Not in release Not in release Needs evaluation — —
php8.3 Not in release Needs evaluation Not in release — —
php8.5 Needs evaluation Not in release Not in release — —
Show all 7 packages Show less packages

CVE-2025-1218

Medium priority
Needs evaluation

The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them. A malicious or compromised MySQL server can send a truncated packet and make the client read...

7 affected packages

php5, php7.0, php7.2, php7.4, php8.1...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
php5 Not in release Not in release Not in release — —
php7.0 Not in release Not in release Not in release — —
php7.2 Not in release Not in release Not in release — Needs evaluation
php7.4 Not in release Not in release Not in release Needs evaluation —
php8.1 Not in release Not in release Needs evaluation — —
php8.3 Not in release Needs evaluation Not in release — —
php8.5 Needs evaluation Not in release Not in release — —
Show all 7 packages Show less packages

CVE-2026-93682

Medium priority
Needs evaluation

[Unknown description]

7 affected packages

php5, php7.0, php7.2, php7.4, php8.1...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
php5 Not in release Not in release Not in release — —
php7.0 Not in release Not in release Not in release — —
php7.2 Not in release Not in release Not in release — Needs evaluation
php7.4 Not in release Not in release Not in release Needs evaluation —
php8.1 Not in release Not in release Needs evaluation — —
php8.3 Not in release Needs evaluation Not in release — —
php8.5 Needs evaluation Not in release Not in release — —
Show all 7 packages Show less packages

CVE-2026-92842

Medium priority
Needs evaluation

[Unknown description]

7 affected packages

php5, php7.0, php7.2, php7.4, php8.1...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
php5 Not in release Not in release Not in release — —
php7.0 Not in release Not in release Not in release — —
php7.2 Not in release Not in release Not in release — Needs evaluation
php7.4 Not in release Not in release Not in release Needs evaluation —
php8.1 Not in release Not in release Needs evaluation — —
php8.3 Not in release Needs evaluation Not in release — —
php8.5 Needs evaluation Not in release Not in release — —
Show all 7 packages Show less packages

CVE-2026-91769

Medium priority
Needs evaluation

[Unknown description]

7 affected packages

php5, php7.0, php7.2, php7.4, php8.1...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
php5 Not in release Not in release Not in release — —
php7.0 Not in release Not in release Not in release — —
php7.2 Not in release Not in release Not in release — Needs evaluation
php7.4 Not in release Not in release Not in release Needs evaluation —
php8.1 Not in release Not in release Needs evaluation — —
php8.3 Not in release Needs evaluation Not in release — —
php8.5 Needs evaluation Not in release Not in release — —
Show all 7 packages Show less packages

CVE-2026-91768

Medium priority
Needs evaluation

[Unknown description]

7 affected packages

php5, php7.0, php7.2, php7.4, php8.1...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
php5 Not in release Not in release Not in release — —
php7.0 Not in release Not in release Not in release — —
php7.2 Not in release Not in release Not in release — Needs evaluation
php7.4 Not in release Not in release Not in release Needs evaluation —
php8.1 Not in release Not in release Needs evaluation — —
php8.3 Not in release Needs evaluation Not in release — —
php8.5 Needs evaluation Not in release Not in release — —
Show all 7 packages Show less packages

CVE-2026-91767

Medium priority
Needs evaluation

[Unknown description]

7 affected packages

php5, php7.0, php7.2, php7.4, php8.1...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
php5 Not in release Not in release Not in release — —
php7.0 Not in release Not in release Not in release — —
php7.2 Not in release Not in release Not in release — Needs evaluation
php7.4 Not in release Not in release Not in release Needs evaluation —
php8.1 Not in release Not in release Needs evaluation — —
php8.3 Not in release Needs evaluation Not in release — —
php8.5 Needs evaluation Not in release Not in release — —
Show all 7 packages Show less packages

CVE-2026-91766

Medium priority
Needs evaluation

[Unknown description]

7 affected packages

php5, php7.0, php7.2, php7.4, php8.1...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
php5 Not in release Not in release Not in release — —
php7.0 Not in release Not in release Not in release — —
php7.2 Not in release Not in release Not in release — Needs evaluation
php7.4 Not in release Not in release Not in release Needs evaluation —
php8.1 Not in release Not in release Needs evaluation — —
php8.3 Not in release Needs evaluation Not in release — —
php8.5 Needs evaluation Not in release Not in release — —
Show all 7 packages Show less packages

CVE-2026-91765

Medium priority
Needs evaluation

[Unknown description]

7 affected packages

php5, php7.0, php7.2, php7.4, php8.1...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
php5 Not in release Not in release Not in release — —
php7.0 Not in release Not in release Not in release — —
php7.2 Not in release Not in release Not in release — Needs evaluation
php7.4 Not in release Not in release Not in release Needs evaluation —
php8.1 Not in release Not in release Needs evaluation — —
php8.3 Not in release Needs evaluation Not in release — —
php8.5 Needs evaluation Not in release Not in release — —
Show all 7 packages Show less packages