A security issue has been identified in specific older versions of PHP, the software that powers many websites. This affects PHP 8.2 versions older than 8.2.31, 8.3 versions older than 8.3.31, 8.4 versions older than 8.4.21, and 8.5 versions older than 8.5.6. The vulnerability applies to sites that use PHP’s SOAP feature (a tool for connecting to certain external services and APIs) with session persistence enabled for that service. When a SOAP request results in an error, the system mishandles the stored session data for the service, which can lead to your site crashing, exposure of sensitive information, or unexpected behavior that disrupts how your site works for visitors.
Source: NVD (National Vulnerability Database) — https://nvd.nist.gov/vuln/detail/CVE-2026-7261
