A security flaw tracked as CVE-2026-17543 has been identified in specific versions of PHP, the widely used software that powers most dynamic websites. The issue stems from improper handling of backslashes in data submitted by visitors to your site.
This flaw enables trivial SQL injection attacks, which let bad actors access, modify, or delete the data your website stores (including customer information, order records, or published site content) if your site runs an affected PHP version.
The impacted PHP versions are: 8.2 releases older than 8.2.33, 8.3 releases older than 8.3.33, 8.4 releases older than 8.4.24, and 8.5 releases older than 8.5.9.
Source: NVD (National Vulnerability Database) — https://nvd.nist.gov/vuln/detail/CVE-2026-17543
