VulnerabilityBSI CERT-Bund
PHP: Mehrere Schwachstellen ermöglichen Codeausführung
NEOSEC enrichment — no mirror of the original source
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in PHP ausnutzen, um Speicherinhalte offenzulegen, einen Denial-of-Service-Zustand auszulösen oder beliebigen Code auszuführen.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Criticalbsi:WID-SEC-2026-40552 linked CVEs
Open advisory with all CVEs
More on PHP
Other advisories
- CriticalCVE-2026-109618PHP: Mehrere Schwachstellen ermöglichen Codeausführung
- MediumCVE-2026-92842PHP: Mehrere Schwachstellen
- HighCVE-2026-114577SourceCodester Php-travel-agency-system: SQL-Injection
- HighCVE-2026-114577SourceCodester Php-travel-agency-system: SQL-Injection
- CriticalCVE-2026-109618Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products
- HighCVE-2026-114441SourceCodester Php-travel-agency-system: SQL-Injection
- HighCVE-2026-114440SourceCodester Php-travel-agency-system: SQL-Injection
- HighCVE-2026-114439SourceCodester Php-travel-agency-system: fehlende Authentifizierung für kritische Funktion
Other news entries
- PHP: Mehrere Schwachstellen ermöglichen nicht spezifizierten AngriffVulnerabilityBSI CERT-Bund
- PHP blames supply chain security biz Chainguard for putting huge chunks of the web at riskNewsThe Register — Security
- Two critical PHP flaws put the web on alert as emergency patches arriveNewsCSO Online
- 'PHP2Shell' Bugs Signal Red Alert for Security IndustryNewsDark Reading
- PHP2Shell Patches Land as First Exploitation Attempts Hit SensorsNewsSecurityWeek
- Widespread PHP Flaw May Cause Many Site Outages TodayNewsKrebs on Security
- PHP devs publish critical bug fix as site owners warned: Pull 'em offline if you're unpatchedNewsThe Register — Security
- PHP ships emergency patches for critical PHP2Shell flawsNewsBleepingComputer
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-4055
ID