VU#763488: Memory corruption vulnerabilities in PHP

Imported from official source

October 22, 2026 22:23 Advisory

Cybersecurity Classified by Officially

Two memory-related vulnerabilities have been identified in PHP versions prior to 8.2.35, 8.3.36, 8.4.27, and 8.5.12. An unauthenticated remote attacker with network access to PHP web services can exploit these vulnerabilities via specially crafted HTTP requests to potentially achieve arbitrary code execution. …

This is an extract. The publication continues at the source.

Read the original at the source: https://kb.cert.org/vuls/id/763488

Officially imported this from CERT Coordination Center’s own source and shows an extract. If you work there, claiming the profile and verifying the domain lets you choose to show the full text here.

Provenance

Organization: CERT Coordination Center — imported from official source
Official source: https://www.kb.cert.org/vuls/atomfeed/ ATOM
Imported: October 22, 2026 23:01
Versions: 1 recorded
Identity: https://kb.cert.org/vuls/id/763488