| CVE-2026-12184 |
|
Denial of Service |
TLS Cleanup Crash |
2026-07-03 |
8.3.0-8.3.31
8.4.0-8.4.20
8.5.0-8.5.5
|
ZendPHP 8.3
ZendPHP 8.4
ZendPHP 8.5
|
| CVE-2026-14355 |
|
Denial of Service |
Buffer allocation flaw in OpenSSL |
2026-07-03 |
7.2.0-7.2.34
7.3.0-7.3.33
7.4.0-7.4.33
8.1.0-8.1.34
8.2.0-8.2.31
8.3.0-8.3.31
8.4.0-8.4.22
8.5.0-8.5.7
|
ZendPHP 7.2
ZendPHP 7.3
ZendPHP 7.4
ZendPHP 8.0
ZendPHP 8.1
ZendPHP 8.2
ZendPHP 8.3
ZendPHP 8.4
ZendPHP 8.5
|
| CVE-2026-29078 |
|
Remote Code Execution |
Out-of-bounds read and write when traversing DOM contents |
2026-05-13 |
8.4.0-8.4.20
8.5.0-8.5.5
|
ZendPHP 8.4
ZendPHP 8.5
|
| CVE-2026-29079 |
|
Cross-Site Request Forgery |
Type-confusion in HTML fragment parsing |
2026-05-13 |
8.4.0-8.4.20
8.5.0-8.5.5
|
ZendPHP 8.4
ZendPHP 8.5
|
| CVE-2025-14179 |
|
Cross-Site Request Forgery |
Invalid NULL byte handling in Firebird prepared queries |
2026-05-10 |
8.1.0-8.1.34
8.2.0-8.2.30
8.3.0-8.3.30
8.4.0-8.4.20
8.5.0-8.5.5
|
ZendPHP 8.1
ZendPHP 8.2
ZendPHP 8.3
ZendPHP 8.4
ZendPHP 8.5
|
| CVE-2026-6104 |
|
Cross-Site Request Forgery |
NUL byte in mbstring encoding leads to out-of-bounds read |
2026-05-10 |
8.4.0-8.4.20
8.5.0-8.5.5
|
ZendPHP 8.4
ZendPHP 8.5
|
| CVE-2026-6722 |
|
Cross-Site Request Forgery |
Use After Free in SOAP deduplication leads to remote code execution')) AND 4619=1140 AND (('IlPk'='IlPk |
2026-05-10 |
7.1.0-7.1.33
7.2.0-7.2.34
7.3.0-7.3.33
7.4.0-7.4.33
8.0.0-8.0.30
8.1.0-8.1.34
8.2.0-8.2.30
8.3.0-8.3.30
8.4.0-8.4.20
8.5.0-8.5.5
|
ZendPHP 7.1
ZendPHP 7.2
ZendPHP 7.3
ZendPHP 7.4
ZendPHP 8.1
ZendPHP 8.2
ZendPHP 8.3
ZendPHP 8.4
ZendPHP 8.5
ZendServer 2021.4.5
|
| CVE-2026-6735 |
|
Cross-Site Request Forgery |
XSS Vulnerability in PHP-FPM status page |
2026-05-10 |
7.1.0-7.1.33
7.2.0-7.2.34
7.3.0-7.3.33
7.4.0-7.4.33
8.0.0-8.0.30
8.1.0-8.1.34
8.2.0-8.2.30
8.3.0-8.3.30
8.4.0-8.4.20
8.5.0-8.5.5
|
ZendPHP 7.1
ZendPHP 7.2
ZendPHP 7.3
ZendPHP 7.4
ZendPHP 8.1
ZendPHP 8.2
ZendPHP 8.3
ZendPHP 8.4
ZendPHP 8.5
ZendServer 2021.4.5
|
| CVE-2026-7258 |
|
Remote Code Execution |
Denial of Service via improper handling of signed characters in ctype functions |
2026-05-10 |
7.1.0-7.1.33
7.2.0-7.2.34
7.3.0-7.3.33
7.4.0-7.4.33
8.0.0-8.0.30
8.1.0-8.1.34
8.2.0-8.2.30
8.3.0-8.3.30
8.4.0-8.4.20
8.5.0-8.5.5
|
ZendPHP 7.1
ZendPHP 7.2
ZendPHP 7.3
ZendPHP 7.4
ZendPHP 8.1
ZendPHP 8.2
ZendPHP 8.3
ZendPHP 8.4
ZendPHP 8.5
ZendServer 2021.4.5
|
| CVE-2026-7259 |
|
Cross-Site Request Forgery |
NULL pointer dereference in mb_regex_encoding |
2026-05-10 |
8.1.0-8.1.34
8.2.0-8.2.30
8.3.0-8.3.30
8.4.0-8.4.20
8.5.0-8.5.5
|
ZendPHP 8.1
ZendPHP 8.2
ZendPHP 8.3
ZendPHP 8.4
ZendPHP 8.5
|
