PH
Language
PHP
On CISA KEVExploited in the wildRansomware-linked
750
CVEs
6
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 134High 130Medium 67Low 4
Watch
Add PHP to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-109618 In wildKEV | 9.8 | Oct 21 | RCE via OOM corruption Affected: 8.2.* before 8.2.35; 8.3.* before 8.3.36; 8.4.* before 8.4.27; 8.5.* before 8.5.12 |
| CVE-2024-4577 RansomwareIn wildKEV | 9.8 | Jun 9 | Argument Injection in PHP-CGI Affected: 8.1.* before 8.1.29; 8.2.* before 8.2.20; 8.3.* before 8.3.8 |
| CVE-2019-11043 RansomwareIn wildKEV | 9.8 | Oct 28 | Underflow in PHP-FPM can lead to RCE Affected: 7.1.x before 7.1.33; 7.2.x before 7.2.24; 7.3.x before 7.3.11 |
| CVE-2016-10033 In wildKEV | 9.8 | Dec 30 | The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra parameters to the mail command and consequently execute… Affected: All versions, or not specified |
| CVE-2012-1823 In wildKEV | 9.8 | May 11 | PHP-CGI Query String Parameter Vulnerability Affected: before 5.3.12; 5.4.0 before 5.4.2 |
Showing 5
The 500 most important CVEs for this product (exploited first, then by severity)