RHSA-2026:47200
Vulnerability from csaf_redhat - Published: 2026-07-28 18:29 - Updated: 2026-08-08 23:06Summary
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Severity
Critical
Notes
Topic: An update for Red Hat Hardened Images RPMs is now available.
Details: This update includes the following RPMs:
php:
* php-8.5.9-1.hum1 (aarch64, x86_64)
* php-bcmath-8.5.9-1.hum1 (aarch64, x86_64)
* php-cli-8.5.9-1.hum1 (aarch64, x86_64)
* php-common-8.5.9-1.hum1 (aarch64, x86_64)
* php-dba-8.5.9-1.hum1 (aarch64, x86_64)
* php-dbg-8.5.9-1.hum1 (aarch64, x86_64)
* php-devel-8.5.9-1.hum1 (aarch64, x86_64)
* php-embedded-8.5.9-1.hum1 (aarch64, x86_64)
* php-enchant-8.5.9-1.hum1 (aarch64, x86_64)
* php-ffi-8.5.9-1.hum1 (aarch64, x86_64)
* php-fpm-8.5.9-1.hum1 (aarch64, x86_64)
* php-gd-8.5.9-1.hum1 (aarch64, x86_64)
* php-gmp-8.5.9-1.hum1 (aarch64, x86_64)
* php-intl-8.5.9-1.hum1 (aarch64, x86_64)
* php-ldap-8.5.9-1.hum1 (aarch64, x86_64)
* php-mbstring-8.5.9-1.hum1 (aarch64, x86_64)
* php-mysqlnd-8.5.9-1.hum1 (aarch64, x86_64)
* php-odbc-8.5.9-1.hum1 (aarch64, x86_64)
* php-pdo-8.5.9-1.hum1 (aarch64, x86_64)
* php-pdo-dblib-8.5.9-1.hum1 (aarch64, x86_64)
* php-pdo-firebird-8.5.9-1.hum1 (aarch64, x86_64)
* php-pgsql-8.5.9-1.hum1 (aarch64, x86_64)
* php-process-8.5.9-1.hum1 (aarch64, x86_64)
* php-snmp-8.5.9-1.hum1 (aarch64, x86_64)
* php-soap-8.5.9-1.hum1 (aarch64, x86_64)
* php-sodium-8.5.9-1.hum1 (aarch64, x86_64)
* php-tidy-8.5.9-1.hum1 (aarch64, x86_64)
* php-xml-8.5.9-1.hum1 (aarch64, x86_64)
* php-8.5.9-1.hum1.src (src)
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in PHP. When processing a specially crafted PHP Archive (phar) file containing circular symbolic links, the PHP process can enter an uncontrolled loop. This unbounded recursion exhausts the program's memory stack, causing the PHP application to crash. This vulnerability could allow an attacker to trigger a Denial of Service (DoS) condition, making the affected PHP service unavailable.
5.5 (Medium)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:php-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:php-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:php-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in PHP. Improper escaping of backslashes in attacker-provided parameters can lead to a SQL injection vulnerability. A remote attacker could exploit this flaw by crafting malicious input, potentially gaining unauthorized access to sensitive information, manipulating data, or causing a denial of service.
7.4 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:php-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:php-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:php-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Critical
A flaw was found in PHP. A remote attacker could exploit this vulnerability by providing specially crafted inputs to the `bccomp()` function. This could lead to an out-of-bounds write, resulting in stack and heap corruption. Such memory corruption can enable arbitrary code execution, allowing the attacker to take control of the affected system.
8.1 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:php-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:php-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:php-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Critical
References
22 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for Red Hat Hardened Images RPMs is now available.",
"title": "Topic"
},
{
"category": "general",
"text": "This update includes the following RPMs:\n\nphp:\n * php-8.5.9-1.hum1 (aarch64, x86_64)\n * php-bcmath-8.5.9-1.hum1 (aarch64, x86_64)\n * php-cli-8.5.9-1.hum1 (aarch64, x86_64)\n * php-common-8.5.9-1.hum1 (aarch64, x86_64)\n * php-dba-8.5.9-1.hum1 (aarch64, x86_64)\n * php-dbg-8.5.9-1.hum1 (aarch64, x86_64)\n * php-devel-8.5.9-1.hum1 (aarch64, x86_64)\n * php-embedded-8.5.9-1.hum1 (aarch64, x86_64)\n * php-enchant-8.5.9-1.hum1 (aarch64, x86_64)\n * php-ffi-8.5.9-1.hum1 (aarch64, x86_64)\n * php-fpm-8.5.9-1.hum1 (aarch64, x86_64)\n * php-gd-8.5.9-1.hum1 (aarch64, x86_64)\n * php-gmp-8.5.9-1.hum1 (aarch64, x86_64)\n * php-intl-8.5.9-1.hum1 (aarch64, x86_64)\n * php-ldap-8.5.9-1.hum1 (aarch64, x86_64)\n * php-mbstring-8.5.9-1.hum1 (aarch64, x86_64)\n * php-mysqlnd-8.5.9-1.hum1 (aarch64, x86_64)\n * php-odbc-8.5.9-1.hum1 (aarch64, x86_64)\n * php-pdo-8.5.9-1.hum1 (aarch64, x86_64)\n * php-pdo-dblib-8.5.9-1.hum1 (aarch64, x86_64)\n * php-pdo-firebird-8.5.9-1.hum1 (aarch64, x86_64)\n * php-pgsql-8.5.9-1.hum1 (aarch64, x86_64)\n * php-process-8.5.9-1.hum1 (aarch64, x86_64)\n * php-snmp-8.5.9-1.hum1 (aarch64, x86_64)\n * php-soap-8.5.9-1.hum1 (aarch64, x86_64)\n * php-sodium-8.5.9-1.hum1 (aarch64, x86_64)\n * php-tidy-8.5.9-1.hum1 (aarch64, x86_64)\n * php-xml-8.5.9-1.hum1 (aarch64, x86_64)\n * php-8.5.9-1.hum1.src (src)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:47200",
"url": "https://access.redhat.com/errata/RHSA-2026:47200"
},
{
"category": "external",
"summary": "https://images.redhat.com/",
"url": "https://images.redhat.com/"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-17544",
"url": "https://access.redhat.com/security/cve/CVE-2026-17544"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-17543",
"url": "https://access.redhat.com/security/cve/CVE-2026-17543"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-7260",
"url": "https://access.redhat.com/security/cve/CVE-2026-7260"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_47200.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
"tracking": {
"current_release_date": "2026-08-08T23:06:26+00:00",
"generator": {
"date": "2026-08-08T23:06:26+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.12"
}
},
"id": "RHSA-2026:47200",
"initial_release_date": "2026-07-28T18:29:08+00:00",
"revision_history": [
{
"date": "2026-07-28T18:29:08+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-08T04:36:23+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-08T23:06:26+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Hardened Images",
"product": {
"name": "Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:hummingbird:1"
}
}
}
],
"category": "product_family",
"name": "Red Hat Hardened Images"
},
{
"branches": [
{
"category": "product_version",
"name": "php-main@aarch64",
"product": {
"name": "php-main@aarch64",
"product_id": "php-main@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/php@8.5.9-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "php-main@src",
"product": {
"name": "php-main@src",
"product_id": "php-main@src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/php@8.5.9-1.hum1?arch=src\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-source-rpms"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "php-main@x86_64",
"product": {
"name": "php-main@x86_64",
"product_id": "php-main@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/php@8.5.9-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "php-main@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:php-main@aarch64"
},
"product_reference": "php-main@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "php-main@src as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:php-main@src"
},
"product_reference": "php-main@src",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "php-main@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:php-main@x86_64"
},
"product_reference": "php-main@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-7260",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-07-30T12:00:45.806292+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2509255"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PHP. When processing a specially crafted PHP Archive (phar) file containing circular symbolic links, the PHP process can enter an uncontrolled loop. This unbounded recursion exhausts the program\u0027s memory stack, causing the PHP application to crash. This vulnerability could allow an attacker to trigger a Denial of Service (DoS) condition, making the affected PHP service unavailable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "php: PHP: Denial of Service via circular symbolic links in phar archives",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate impact flaw in PHP allows a local attacker to trigger a denial of service by providing a specially crafted phar archive containing circular symbolic links. Successful exploitation exhausts the C stack, leading to a PHP process crash, which can disrupt services utilizing PHP for archive processing.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:php-main@aarch64",
"Red Hat Hardened Images:php-main@src",
"Red Hat Hardened Images:php-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-7260"
},
{
"category": "external",
"summary": "RHBZ#2509255",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509255"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-7260",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-7260"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-7260",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-7260"
},
{
"category": "external",
"summary": "https://github.com/php/php-src/security/advisories/GHSA-vc5h-9ppw-p5f3",
"url": "https://github.com/php/php-src/security/advisories/GHSA-vc5h-9ppw-p5f3"
}
],
"release_date": "2026-07-30T11:22:53.918000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-28T18:29:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:php-main@aarch64",
"Red Hat Hardened Images:php-main@src",
"Red Hat Hardened Images:php-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47200"
},
{
"category": "workaround",
"details": "To mitigate this issue, avoid processing phar archives from untrusted sources. If the `phar` extension is not essential for your application, consider disabling it in the PHP configuration. Disabling the `phar` extension may impact applications that rely on it for legitimate archive handling.",
"product_ids": [
"Red Hat Hardened Images:php-main@aarch64",
"Red Hat Hardened Images:php-main@src",
"Red Hat Hardened Images:php-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:php-main@aarch64",
"Red Hat Hardened Images:php-main@src",
"Red Hat Hardened Images:php-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "php: PHP: Denial of Service via circular symbolic links in phar archives"
},
{
"cve": "CVE-2026-17543",
"cwe": {
"id": "CWE-89",
"name": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)"
},
"discovery_date": "2026-07-30T12:00:40.603902+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2509254"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PHP. Improper escaping of backslashes in attacker-provided parameters can lead to a SQL injection vulnerability. A remote attacker could exploit this flaw by crafting malicious input, potentially gaining unauthorized access to sensitive information, manipulating data, or causing a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "php: ext-pgsql: PHP: SQL injection via improper backslash escaping",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The Red Hat Product Security team has assessed the severity of this vulnerability as Important. A remote attacker could exploit this flaw to inject malicious SQL commands into a connected PostgreSQL database, potentially exposing or manipulating sensitive data. However, only applications using PHP\u0027s older pg_insert(), pg_update(), pg_select(), or pg_delete() functions with unsanitized user input are at risk applications built on modern practices such as PDO, prepared statements, or parameterized queries are not affected. The vulnerability stems from improper handling of backslash characters in PHP\u0027s PostgreSQL extension, which can allow an attacker to break out of expected query boundaries and execute unintended SQL commands.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:php-main@aarch64",
"Red Hat Hardened Images:php-main@src",
"Red Hat Hardened Images:php-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-17543"
},
{
"category": "external",
"summary": "RHBZ#2509254",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509254"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-17543",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-17543"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-17543",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17543"
},
{
"category": "external",
"summary": "https://github.com/php/php-src/security/advisories/GHSA-7qpv-r5mr-78m4",
"url": "https://github.com/php/php-src/security/advisories/GHSA-7qpv-r5mr-78m4"
}
],
"release_date": "2026-07-30T11:22:04.549000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-28T18:29:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:php-main@aarch64",
"Red Hat Hardened Images:php-main@src",
"Red Hat Hardened Images:php-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47200"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Hardened Images:php-main@aarch64",
"Red Hat Hardened Images:php-main@src",
"Red Hat Hardened Images:php-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:php-main@aarch64",
"Red Hat Hardened Images:php-main@src",
"Red Hat Hardened Images:php-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "php: ext-pgsql: PHP: SQL injection via improper backslash escaping"
},
{
"cve": "CVE-2026-17544",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-07-30T12:00:49.223022+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2509256"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PHP. A remote attacker could exploit this vulnerability by providing specially crafted inputs to the `bccomp()` function. This could lead to an out-of-bounds write, resulting in stack and heap corruption. Such memory corruption can enable arbitrary code execution, allowing the attacker to take control of the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "php: PHP: Arbitrary code execution via out-of-bounds write in bccomp()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in PHP that could lead to arbitrary code execution due to an out-of-bounds write in the `bccomp()` function. While exploitation requires high attack complexity, a successful attack could result in stack and heap corruption, potentially compromising the system. This affects PHP 8.4 and 8.5 streams in Red Hat Enterprise Linux 10 and Red Hat In-Vehicle OS 2.0.z.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:php-main@aarch64",
"Red Hat Hardened Images:php-main@src",
"Red Hat Hardened Images:php-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-17544"
},
{
"category": "external",
"summary": "RHBZ#2509256",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509256"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-17544",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-17544"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-17544",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17544"
},
{
"category": "external",
"summary": "https://github.com/php/php-src/security/advisories/GHSA-x692-q9x7-8c3f",
"url": "https://github.com/php/php-src/security/advisories/GHSA-x692-q9x7-8c3f"
}
],
"release_date": "2026-07-30T11:22:24.023000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-28T18:29:08+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:php-main@aarch64",
"Red Hat Hardened Images:php-main@src",
"Red Hat Hardened Images:php-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47200"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Hardened Images:php-main@aarch64",
"Red Hat Hardened Images:php-main@src",
"Red Hat Hardened Images:php-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:php-main@aarch64",
"Red Hat Hardened Images:php-main@src",
"Red Hat Hardened Images:php-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "php: PHP: Arbitrary code execution via out-of-bounds write in bccomp()"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…