VU#763488: Memory corruption vulnerabilities in PHP

Reported by CERT/CC

Summary by Cyber Security News23 Oct 2026, 00:23 CET

About this summary. This is a short excerpt from the description that CERT/CC published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://kb.cert.org/vuls/id/763488

Overview Two critical memory-related vulnerabilities have been identified in PHP versions prior to 8.2.35, 8.3.36, 8.4.27, and 8.5.12. An unauthenticated remote attacker with network access to PHP web services can exploit these vulnerabilities via specially crafted HTTP requests to potentially achieve arbitrary code execution. Description PHP is a widely used open-source scripting language designed for web development and server-side applications.

Read the full article at CERT/CC →

Source attribution: headline and facts are from CERT/CC (kb.cert.org). Summary method: excerpt of the source description. See our source attribution policy.