Fedora 43 : php-pecl-mongodb2 (2026-1ed9f02b1e)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-1ed9f02b1e advisory. Version 2.1.12 Release Highlights - PHPC-276: Prevent stack exhaustion when decoding deeply nested BSON - PHPC-276: Enforce the decode nesting limit...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: php (UTSA-2026-143723)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143723 advisory. PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after bei...

PT-2026-122507

The GeoDirectory WordPress plugin before 2.8.194 does not properly escape administrator-defined text before writing it into a generated PHP file in its own folder, allowing high privilege users such as a subsite administrator on a multisite network, who cannot otherwise run code, to achieve Remot...

PHP 8.4.27 Session Upload Progress Serialization Mismatch Remote Code Execution

PHP version 8.4.27 contains a session upload progress serialization-handler mismatch that can lead to unauthenticated object injection and remote code execution when an application changes the session handler at runtime. Included is a proof of concept and Docker lab...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: php (UTSA-2026-143715)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143715 advisory. When the HTTP stream wrapper follows a redirect and the response carries a Location header with an empty value, the redirect code reads one byte past the end of the...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: php (UTSA-2026-143724)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143724 advisory. PHP uses longjmp for out-of-memory OOM errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: php (UTSA-2026-143720)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143720 advisory. The convert.base64-encode, convert.quoted-printable-encode and convert.quoted-printable-decode stream filters accept a line-break-chars option whose length is tracke...

PHP 7.3.33 State Corruption Mitigation Patch

PHP version 7.3.33 is affected by out-of-memory bailout handling and stale request global state issues. This patch backports the PHP 7.4 end-of-life mitigation for the affected request lifecycle and multipart parsing paths...

PHP OOM / longjmp() State Corruption Simulation

PHP contains an out-of-memory handling issue where longjmp may leave request memory partially initialized before cleanup reads or branches on it, potentially resulting in remote code execution. This educational visualization demonstrates the conceptual execution flow...

PHP 8.4.26 Stale Session Global State Remote Code Execution

PHP version 8.4.26 contains a stale session global-state use-after-free vulnerability that can lead to remote code execution. This proof of concept demonstrates the issue through session upload progress handling. https://packetstorm.news/download/237408...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: php (UTSA-2026-143721)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143721 advisory. phartarnumber parses the octal size field of a TAR header into a uint32t with no overflow check. The field is 11 octal digits wide and holds values up to 0x1FFFFFFFF...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: php (UTSA-2026-143719)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143719 advisory. cleanupxmlnode in the SOAP XML parser recurses once per XML nesting level with no depth limit. An unauthenticated attacker can post a SOAP request containing tens of...

PHP 8.4.26 Pre-Authentication Remote Code Execution

PHP version 8.4.26 contains out-of-memory handling and use-after-free flaws in request processing. The supplied proof of concept uses crafted HTTP multipart requests to disclose process memory and execute a short command without authentication. https://packetstorm.news/download/237415...

Fedora 44 : php-pecl-mongodb2 (2026-4a5aaed9f5)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-4a5aaed9f5 advisory. Version 2.1.12 Release Highlights - PHPC-276: Prevent stack exhaustion when decoding deeply nested BSON - PHPC-276: Enforce the decode nesting limit...

Amazon Linux 2 : php (ALAS-2026-4015)

The version of php installed on the remote host is prior to 5.4.16-46. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-4015 advisory. cleanupxmlnode in the SOAP XML parser recurses once per XML nesting level with no depth limit. An unauthenticated attacker can post a...

CentOS Linux 7.9 [CIQ] Security Update: php / php-bcmath / php-cli / php-common / php-dba / php-devel / etc Multiple Vulnerabilities (ciqsa-2026_1717)

The CentOS Linux 7.9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261717 advisory. This advisory aggregates security fixes for the php SRPM in CIQ CentOS Bridge 7.9. It addresses 2 CVEs: CVE-2026-109619, CVE-2026-109618. Tenable has...

PHP 8.5.12 Session Upload Progress Serializer Confusion

PHP version 8.5.12 contains a session upload progress serializer confusion issue when an application changes the session serializer at runtime, allowing unauthenticated object injection and remote code execution where a suitable gadget is present. https://packetstorm.news/download/237404...

PHP Session Upload Progress Remote Code Execution

PHP contains a session upload-progress deserialization vulnerability that can result in remote command execution when an application switches the session serializer at runtime. The proof of concept provides a local intentionally vulnerable lab. https://packetstorm.news/download/237419...

Codexonics Prime Mover – Backup and Migration deserialization injection vulnerability

Codexonics Prime Mover – Versions 2.2.1 and earlier contain a deserialization injection vulnerability. This flaw arises because the migration search replace routine recursiveUnserializeReplace deserializes untrusted input. Unauthenticated attackers can submit specially crafted base64-encoded...

Important: php

Issue Overview: cleanupxmlnode in the SOAP XML parser recurses once per XML nesting level with no depth limit. An unauthenticated attacker can post a SOAP request containing tens of thousands of nested elements to any SoapServer endpoint, exhaust the stack and crash the process. The same unbounde...