PHP: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff
NEOSEC enrichment — no mirror of the original source
Ein Angreifer kann mehrere Schwachstellen in PHP ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Criticalbsi:WID-SEC-2026-40552 linked CVEs
Open advisory with all CVEs
More on PHP
Other advisories
- MediumCVE-2026-114260SourceCodester File-management-system-php: fehlende Authentifizierung für kritische Funktion
- HighCVE-2026-114259SourceCodester File-management-system-php: uneingeschränkter Dateiupload
- HighCVE-2026-114258SourceCodester File-management-system-php: SQL-Injection
- HighCVE-2026-114257SourceCodester File-management-system-php: SQL-Injection
- CriticalCVE-2026-109618Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products
- HighCVE-2026-114256SourceCodester File-management-system-php: SQL-Injection
- CriticalCVE-2026-109618PHP vulnerabilities
- HighCVE-2026-114255SourceCodester File-management-system-php: SQL-Injection
Other news entries
- PHP blames supply chain security biz Chainguard for putting huge chunks of the web at riskNewsThe Register — Security
- Two critical PHP flaws put the web on alert as emergency patches arriveNewsCSO Online
- 'PHP2Shell' Bugs Signal Red Alert for Security IndustryNewsDark Reading
- PHP2Shell Patches Land as First Exploitation Attempts Hit SensorsNewsSecurityWeek
- Widespread PHP Flaw May Cause Many Site Outages TodayNewsKrebs on Security
- PHP devs publish critical bug fix as site owners warned: Pull 'em offline if you're unpatchedNewsThe Register — Security
- PHP ships emergency patches for critical PHP2Shell flawsNewsBleepingComputer
- NCSC-2026-0443 [1.00] [H/H] Kwetsbaarheden verholpen in PHPNewsNCSC-NL
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-4055
ID