Announcements

CVE-2026-7261 (matched: php)

  • 25th July 2026
A security vulnerability has been identified in specific versions of PHP, the software that powers most dynamic, interactive websites. The affected versions are 8.2 releases older than 8.2.31, 8.3 releases older than 8.3.31, 8.4 releases older than 8.4.21, and 8.5 releases older than 8.5.6.The flaw occurs when a specific PHP feature called ...
Continue reading

CVE-2026-6722 (matched: php)

  • 25th July 2026
A security flaw, tracked as CVE-2026-6722, has been identified in specific versions of PHP, the programming language that powers many interactive website features. The issue affects PHP’s SOAP extension, a tool used for exchanging data between different web services. The flaw can be exploited by an attacker who can send specially crafted ...
Continue reading

CVE-2025-14179 (matched: php)

  • 25th July 2026
A security flaw exists in specific older versions of PHP, the software used to run many dynamic websites, when the PDO Firebird database connection tool is in use. The affected versions are PHP 8.2 releases older than 8.2.31, 8.3 releases older than 8.3.31, 8.4 releases older than 8.4.21, and 8.5 releases older than 8.5.6. The bug occurs when ...
Continue reading

CVE-2026-34084 (matched: php)

  • 25th July 2026
PhpSpreadsheet is a popular library used by many web applications to read and write spreadsheet files, and older versions of it have a security flaw. This issue only impacts websites where users can submit the filename of a spreadsheet that the site loads using this library.If your site fits that scenario, an attacker could send a specially ...
Continue reading