Security Alert (A26-07-52): Multiple Vulnerabilities in PHP


 

Published on: 31 July 2026

Description:

PHP has released security updates to address multiple vulnerabilities in PHP. The detailed information about the vulnerabilities can be found at:
https://www.php.net/ChangeLog-8.php

 

Affected Systems:

  • PHP 8.5 version prior to 8.5.9
  • PHP 8.4 version prior to 8.4.24
  • PHP 8.3 version prior to 8.3.33
  • PHP 8.2 version prior to 8.2.33

For detailed information of the affected systems, please refer to the corresponding security advisories at vendor's website.

 

Impact:

Successful exploitation of the vulnerabilities could lead to denial of service or tampering on an affected system.

 

Recommendation:

Patches for affected systems are now available. System administrators of affected systems should follow the recommendations provided by the vendor and take immediate actions to mitigate the risk.

 

More Information:

  • https://www.php.net/ChangeLog-8.php
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-7260
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9672
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-17543 (to CVE-2026-17544)


Tag: PHP
Tags