[UPDATE] [kritisch] PHP: Mehrere Schwachstellen ermöglichen Codeausführung

Imported from official source

Announcement

Cybersecurity Classified by Officially

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in PHP ausnutzen, um Speicherinhalte offenzulegen, einen Denial-of-Service-Zustand auszulösen oder beliebigen Code auszuführen.

Source: CERT-Bund (BSI) Warn- und Informationsdienst.

Read the original at the source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-4055

Officially imported this from CERT-Bund (BSI) Warn- und Informationsdienst’s own source. If you work there, claiming the profile and verifying the domain lets you choose to show the full text here.

This publication has changed since it was first published

9 versions recorded. The original is kept in full — nothing is overwritten.

  1. v9 imported change on current
  2. v8 imported change on
  3. v7 imported change on
  4. v6 imported change on
  5. v5 imported change on
  6. v4 imported change on
  7. v3 imported change on Titled: “[UPDATE] [kritisch] PHP: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff”
  8. v2 imported change on Titled: “[NEU] [kritisch] PHP: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff”
  9. v1 as first published on Titled: “[NEU] [hoch] PHP: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff”

Provenance

Organization
CERT-Bund (BSI) Warn- und Informationsdienst — imported from official source
Official source
https://wid.cert-bund.de/content/public/securityAdvisory/rss RSS
Imported
October 21, 2026 09:35
Versions
9 recorded
Identity
https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-4055

Officially records where a publication came from, not whether it is true. Imported records are reproduced from an organization's own official source.