MGASA-2026-0322 Updated php packages fix security vulnerabilities

This update brings the latest version of php 8.2 and fixes some security vulnerabilities...

Updated php packages fix security vulnerabilities

This update brings the latest version of php 8.2 and fixes some security vulnerabilities...

CVE-2026-18788

Trippo ResponsiveFilemanager

CVE-2026-18788 Trippo ResponsiveFilemanager dialog.php unrestricted upload

A security flaw has been discovered in Trippo ResponsiveFilemanager up to 9.14.0. The impacted element is an unknown function of the file filemanager/dialog.php. The manipulation results in unrestricted upload. The attack may be performed from remote. The exploit has been released to the public a...

CVE-2026-18766

A flaw has been found in chetans9 core-php-admin-panel up to 90d07ed5aac5e0f09b6a5828d7bb2eb83010763f. This issue affects some unknown processing of the file /Applications/MAMP/htdocs/core-php-admin-panel-master/customers.php. Executing a manipulation of the argument filtercol can lead to sql...

CLSA-2026-1783904626 TuxCare security update for aws/aws-sdk-php (1 CVE)

TuxCare rebuilt aws/aws-sdk-php to address 1 CVE. Fixed in 3.263.4-p3+tuxcare...

CLSA-2026-1769734644 TuxCare security update for firebase/php-jwt (1 CVE)

TuxCare rebuilt firebase/php-jwt to address 1 CVE. Fixed in 6.11.1-p2+tuxcare...

CLSA-2026-1776819190 TuxCare security update for phpunit/phpunit (1 CVE)

TuxCare rebuilt phpunit/phpunit to address 1 CVE. Fixed in 9.5.28-p1+tuxcare...

CLSA-2026-1776732788 TuxCare security update for phpunit/phpunit (1 CVE)

TuxCare rebuilt phpunit/phpunit to address 1 CVE. Fixed in 10.4.2-p1+tuxcare...

CLSA-2026-1769993567 TuxCare security update for aws/aws-sdk-php (1 CVE)

TuxCare rebuilt aws/aws-sdk-php to address 1 CVE. Fixed in 3.263.4-p1+tuxcare...

CLSA-2026-1780447841 TuxCare security update for aws/aws-sdk-php (1 CVE)

TuxCare rebuilt aws/aws-sdk-php to address 1 CVE. Fixed in 3.263.4-p2+tuxcare...

CLSA-2026-1778978781 TuxCare security update for symfony/http-foundation (2 CVEs)

TuxCare rebuilt symfony/http-foundation to address 2 CVEs. Fixed in 3.4.47-p3+tuxcare...

CLSA-2026-1776818215 TuxCare security update for phpunit/phpunit (1 CVE)

TuxCare rebuilt phpunit/phpunit to address 1 CVE. Fixed in 8.4.3-p1+tuxcare...

CVE-2026-18766

CVE-2026-18766 affects the chetans9 core-php-admin-panel (up to the commit 90d07ed5aac5e0f09b6a5828d7bb2eb83010763f). The issue is a SQL injection caused by manipulation of the argument filter_col in customers.php. It can be exploited remotely, and the exploit has been published and may be used. ...

CVE-2026-18766 chetans9 core-php-admin-panel customers.php sql injection

A flaw has been found in chetans9 core-php-admin-panel up to 90d07ed5aac5e0f09b6a5828d7bb2eb83010763f. This issue affects some unknown processing of the file /Applications/MAMP/htdocs/core-php-admin-panel-master/customers.php. Executing a manipulation of the argument filtercol can lead to sql...

CVE-2026-18766 chetans9 core-php-admin-panel customers.php sql injection

A flaw has been found in chetans9 core-php-admin-panel up to 90d07ed5aac5e0f09b6a5828d7bb2eb83010763f. This issue affects some unknown processing of the file /Applications/MAMP/htdocs/core-php-admin-panel-master/customers.php. Executing a manipulation of the argument filtercol can lead to sql...

CVE-2026-18766

A flaw has been found in chetans9 core-php-admin-panel up to 90d07ed5aac5e0f09b6a5828d7bb2eb83010763f. This issue affects some unknown processing of the file /Applications/MAMP/htdocs/core-php-admin-panel-master/customers.php. Executing a manipulation of the argument filtercol can lead to sql...

CVE-2026-43871

A flaw was found in Apache Thrift, affecting its Python, Go, PHP, and Java components. This vulnerability, known as an 'Infinite Loop', could allow a remote attacker to disrupt service availability. By exploiting this flaw, an attacker can trigger a continuous loop, leading to a denial of service...

Exploit for CVE-2026-17543

PHP CVE-2026-17543 Exposure Validator Safe network-side valid...

php: ext/openssl: memory corruption in openssl_encrypt with AES-WRAP-PAD

A flaw was found in the OpenSSL extension of PHP. The AES-WRAP-PAD algorithm implementation uses the size of the plaintext length without accounting for the RFC 5649 expansion to allocate the output buffer for the AES key-wrap-with-padding operation. This may lead to an undersized memory allocati...