PH
Language
PHP
On CISA KEVExploited in the wildRansomware-linked
750
CVEs
6
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 134High 130Medium 67Low 4
Watch
Add PHP to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-7068 | 3.6 | Sep 9 | In PHP versions 7.2.x below 7.2.33, 7.3.x below 7.3.21 and 7.4.x below 7.4.9, while processing PHAR files using phar extension, phar_parse_zipfile could be tricked into accessing… Affected: 7.2.0 before 7.2.33; 7.3.0 before 7.3.21; 7.4.0 before 7.4.9 |
| CVE-2026-6103 | 3.3 | Sep 25 | Phar TAR phar_tar_number() Integer Overflow - Archive Entry Injection Affected: 8.2.* before 8.2.34; 8.3.* before 8.3.35; 8.4.* before 8.4.26; 8.5.* before 8.5.11 |
| CVE-2024-9026 | 3.3 | Oct 8 | PHP-FPM logs from children may be altered Affected: 8.1.* before 8.1.30; 8.2.* before 8.2.24; 8.3.* before 8.3.12 |
| CVE-2025-1217 | 3.1 | Mar 29 | Header parser of http stream wrapper does not handle folded headers Affected: 8.1.* before 8.1.32; 8.2.* before 8.2.28; 8.3.* before 8.3.19; 8.4.* before 8.4.5 |
Showing 4
The 500 most important CVEs for this product (exploited first, then by severity)