Details:
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.
Security Fix(es):
PHP: PHP: Denial of Service via improper handling of signed characters in ctype functions (CVE-2026-7258)
PHP: PHP-FPM: PHP-FPM: Cross-Site Scripting vulnerability via improper URL sanitation (CVE-2026-6735)
php: NULL pointer dereference in SOAP apache:Map decoder with missing <value> (CVE-2026-7262)
php: signed integer overflow in metaphone() (CVE-2026-7568)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
0:5.1.23-1.module+el9.7.0+24111+199d2cc40:8.2.31-1.module+el9.8.0+24325+74f58d380:8.2.31-1.module+el9.8.0+24325+74f58d380:8.2.31-1.module+el9.8.0+24325+74f58d380:8.2.31-1.module+el9.8.0+24325+74f58d380:8.2.31-1.module+el9.8.0+24325+74f58d380:8.2.31-1.module+el9.8.0+24325+74f58d380:8.2.31-1.module+el9.8.0+24325+74f58d380:8.2.31-1.module+el9.8.0+24325+74f58d380:8.2.31-1.module+el9.8.0+24325+74f58d38Exploitability
AV:NAC:LPR:NUI:NScope
S:UImpact
C:NI:NA:H7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H