CVE catalog

CVE-2026-12184

PHP vulnerabilities

[CVE catalog]

Severity
Medium · CVSS 5.9CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Published
Source
[NVD] · [CVE record]

unknown

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianphp8.2bookworm8.2.32-1~deb12u1not affected
Debianphp8.2bookworm-security8.2.35-1~deb12u1not affected
Ubuntuphp8.3noble8.3.6-0ubuntu0.24.04.10fixed
Ubuntulibapache2-mod-php8.3noble8.3.6-0ubuntu0.24.04.10fixed
Ubuntulibphp8.3-embednoble8.3.6-0ubuntu0.24.04.10fixed
Ubuntuphp8.3-bcmathnoble8.3.6-0ubuntu0.24.04.10fixed
Ubuntuphp8.3-bz2noble8.3.6-0ubuntu0.24.04.10fixed
Ubuntuphp8.3-cginoble8.3.6-0ubuntu0.24.04.10fixed
Ubuntuphp8.3-clinoble8.3.6-0ubuntu0.24.04.10fixed
Ubuntuphp8.3-commonnoble8.3.6-0ubuntu0.24.04.10fixed
Ubuntuphp8.3-curlnoble8.3.6-0ubuntu0.24.04.10fixed
Ubuntuphp8.3-dbanoble8.3.6-0ubuntu0.24.04.10fixed
Ubuntuphp8.3-devnoble8.3.6-0ubuntu0.24.04.10fixed
Ubuntuphp8.3-enchantnoble8.3.6-0ubuntu0.24.04.10fixed
Ubuntuphp8.3-fpmnoble8.3.6-0ubuntu0.24.04.10fixed
Ubuntuphp8.3-gdnoble8.3.6-0ubuntu0.24.04.10fixed
Ubuntuphp8.3-gmpnoble8.3.6-0ubuntu0.24.04.10fixed
Ubuntuphp8.3-imapnoble8.3.6-0ubuntu0.24.04.10fixed
Ubuntuphp8.3-interbasenoble8.3.6-0ubuntu0.24.04.10fixed
Ubuntuphp8.3-intlnoble8.3.6-0ubuntu0.24.04.10fixed
Ubuntuphp8.3-ldapnoble8.3.6-0ubuntu0.24.04.10fixed
Ubuntuphp8.3-mbstringnoble8.3.6-0ubuntu0.24.04.10fixed
Ubuntuphp8.3-mysqlnoble8.3.6-0ubuntu0.24.04.10fixed
Ubuntuphp8.3-odbcnoble8.3.6-0ubuntu0.24.04.10fixed
Ubuntuphp8.3-opcachenoble8.3.6-0ubuntu0.24.04.10fixed
Ubuntuphp8.3-pgsqlnoble8.3.6-0ubuntu0.24.04.10fixed
Ubuntuphp8.3-phpdbgnoble8.3.6-0ubuntu0.24.04.10fixed
Ubuntuphp8.3-pspellnoble8.3.6-0ubuntu0.24.04.10fixed
Ubuntuphp8.3-readlinenoble8.3.6-0ubuntu0.24.04.10fixed
Ubuntuphp8.3-snmpnoble8.3.6-0ubuntu0.24.04.10fixed
Ubuntuphp8.3-soapnoble8.3.6-0ubuntu0.24.04.10fixed
Ubuntuphp8.3-sqlite3noble8.3.6-0ubuntu0.24.04.10fixed
Ubuntuphp8.3-sybasenoble8.3.6-0ubuntu0.24.04.10fixed
Ubuntuphp8.3-tidynoble8.3.6-0ubuntu0.24.04.10fixed
Ubuntuphp8.3-xmlnoble8.3.6-0ubuntu0.24.04.10fixed
Ubuntuphp8.3-xslnoble8.3.6-0ubuntu0.24.04.10fixed
Ubuntuphp8.3-zipnoble8.3.6-0ubuntu0.24.04.10fixed
Suseapache2-mod_php8linux enterprise module for web and scripting 15 sp78.3.32-150700.3.15.1fixed
Susephp8linux enterprise module for web and scripting 15 sp78.3.32-150700.3.15.1fixed
Susephp8-embedlinux enterprise module for web and scripting 15 sp78.3.32-150700.3.15.1fixed
Susephp8-fastcgilinux enterprise module for web and scripting 15 sp78.3.32-150700.3.15.1fixed
Susephp8-fpmlinux enterprise module for web and scripting 15 sp78.3.32-150700.3.15.1fixed
Susephp8-testlinux enterprise module for web and scripting 15 sp78.3.32-150700.3.15.1fixed
Ubuntuphp8.122.048.1.0~rc4-1ubuntu2vulnerable
Ubuntuphp8.122.048.1.0-1vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu1vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.1vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.2vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.3vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.4vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.5vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.6vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.8vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.9vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.10vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.11vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.13vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.14vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.15vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.17vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.18vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.19vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.20vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.21vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.22vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.23vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.24vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.25fixed
Ubuntuphp8.324.048.3.0-1vulnerable
Ubuntuphp8.324.048.3.0-1ubuntu1vulnerable
Ubuntuphp8.324.048.3.4-1vulnerable
Ubuntuphp8.324.048.3.4-1build1vulnerable
Ubuntuphp8.324.048.3.6-0maysync1vulnerable
Ubuntuphp8.324.048.3.6-0ubuntu0.24.04.1vulnerable
Ubuntuphp8.324.048.3.6-0ubuntu0.24.04.2vulnerable
Ubuntuphp8.324.048.3.6-0ubuntu0.24.04.3vulnerable
Ubuntuphp8.324.048.3.6-0ubuntu0.24.04.4vulnerable
Ubuntuphp8.324.048.3.6-0ubuntu0.24.04.5vulnerable
Ubuntuphp8.324.048.3.6-0ubuntu0.24.04.6vulnerable
Ubuntuphp8.324.048.3.6-0ubuntu0.24.04.7vulnerable
Ubuntuphp8.324.048.3.6-0ubuntu0.24.04.8vulnerable
Ubuntuphp8.324.048.3.6-0ubuntu0.24.04.9vulnerable
Ubuntuphp8.324.048.3.6-0ubuntu0.24.04.10fixed
Ubuntuphp8.526.048.5.2-0ubuntu1vulnerable
Ubuntuphp8.526.048.5.4-0ubuntu1vulnerable
Ubuntuphp8.526.048.5.4-0ubuntu1.1vulnerable
Ubuntuphp8.526.048.5.4-0ubuntu1.2fixed
Ubuntuphp8.425.108.4.5-1ubuntu1vulnerable
Ubuntuphp8.425.108.4.8-1ubuntu1vulnerable
Ubuntuphp8.425.108.4.11-1ubuntu1vulnerable
Ubuntuphp8.425.108.4.11-1ubuntu1.1vulnerable
Ubuntuphp8.425.108.4.11-1ubuntu1.2vulnerable
Ubuntuphp8.526.048.5.2-0ubuntu1vulnerable
Ubuntuphp8.526.048.5.4-0ubuntu1vulnerable
Ubuntuphp8.526.048.5.4-0ubuntu1.1vulnerable
Ubuntuphp8.526.048.5.4-0ubuntu1.2fixed
Suseapache2-mod_php8linux enterprise server 16.08.4.23-160000.1.1fixed
Susephp8linux enterprise server 16.08.4.23-160000.1.1fixed
Susephp8-embedlinux enterprise server 16.08.4.23-160000.1.1fixed
Susephp8-fastcgilinux enterprise server 16.08.4.23-160000.1.1fixed
Susephp8-fpmlinux enterprise server 16.08.4.23-160000.1.1fixed
Suseapache2-mod_php8linux enterprise server for sap applications 16.08.4.23-160000.1.1fixed
Susephp8linux enterprise server for sap applications 16.08.4.23-160000.1.1fixed
Susephp8-embedlinux enterprise server for sap applications 16.08.4.23-160000.1.1fixed
Susephp8-fastcgilinux enterprise server for sap applications 16.08.4.23-160000.1.1fixed
Susephp8-fpmlinux enterprise server for sap applications 16.08.4.23-160000.1.1fixed
Opensusephp8tumbleweed8.5.8-1.1fixed
Opensuseapache2-mod_php8leap 16.08.4.23-160000.1.1fixed
Opensusephp8leap 16.08.4.23-160000.1.1fixed
Opensusephp8-embedleap 16.08.4.23-160000.1.1fixed
Opensusephp8-fastcgileap 16.08.4.23-160000.1.1fixed
Opensusephp8-fpmleap 16.08.4.23-160000.1.1fixed
Opensusephp8-testleap 16.08.4.23-160000.1.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianphp8.2sourcebookwormNot affectedunimportantNot reportedNot reported
Ubuntuphp8.3debnoble8.3.6-0ubuntu0.24.04.10Not reportedNot reportedNot reported
Ubuntulibapache2-mod-php8.3debnoble8.3.6-0ubuntu0.24.04.10Not reportedNot reportedNot reported
Ubuntulibphp8.3-embeddebnoble8.3.6-0ubuntu0.24.04.10Not reportedNot reportedNot reported
Ubuntuphp8.3-bcmathdebnoble8.3.6-0ubuntu0.24.04.10Not reportedNot reportedNot reported
Ubuntuphp8.3-bz2debnoble8.3.6-0ubuntu0.24.04.10Not reportedNot reportedNot reported
Ubuntuphp8.3-cgidebnoble8.3.6-0ubuntu0.24.04.10Not reportedNot reportedNot reported
Ubuntuphp8.3-clidebnoble8.3.6-0ubuntu0.24.04.10Not reportedNot reportedNot reported
Ubuntuphp8.3-commondebnoble8.3.6-0ubuntu0.24.04.10Not reportedNot reportedNot reported
Ubuntuphp8.3-curldebnoble8.3.6-0ubuntu0.24.04.10Not reportedNot reportedNot reported
Ubuntuphp8.3-dbadebnoble8.3.6-0ubuntu0.24.04.10Not reportedNot reportedNot reported
Ubuntuphp8.3-devdebnoble8.3.6-0ubuntu0.24.04.10Not reportedNot reportedNot reported
Ubuntuphp8.3-enchantdebnoble8.3.6-0ubuntu0.24.04.10Not reportedNot reportedNot reported
Ubuntuphp8.3-fpmdebnoble8.3.6-0ubuntu0.24.04.10Not reportedNot reportedNot reported
Ubuntuphp8.3-gddebnoble8.3.6-0ubuntu0.24.04.10Not reportedNot reportedNot reported
Ubuntuphp8.3-gmpdebnoble8.3.6-0ubuntu0.24.04.10Not reportedNot reportedNot reported
Ubuntuphp8.3-imapdebnoble8.3.6-0ubuntu0.24.04.10Not reportedNot reportedNot reported
Ubuntuphp8.3-interbasedebnoble8.3.6-0ubuntu0.24.04.10Not reportedNot reportedNot reported
Ubuntuphp8.3-intldebnoble8.3.6-0ubuntu0.24.04.10Not reportedNot reportedNot reported
Ubuntuphp8.3-ldapdebnoble8.3.6-0ubuntu0.24.04.10Not reportedNot reportedNot reported
Ubuntuphp8.3-mbstringdebnoble8.3.6-0ubuntu0.24.04.10Not reportedNot reportedNot reported
Ubuntuphp8.3-mysqldebnoble8.3.6-0ubuntu0.24.04.10Not reportedNot reportedNot reported
Ubuntuphp8.3-odbcdebnoble8.3.6-0ubuntu0.24.04.10Not reportedNot reportedNot reported
Ubuntuphp8.3-opcachedebnoble8.3.6-0ubuntu0.24.04.10Not reportedNot reportedNot reported
Ubuntuphp8.3-pgsqldebnoble8.3.6-0ubuntu0.24.04.10Not reportedNot reportedNot reported
Ubuntuphp8.3-phpdbgdebnoble8.3.6-0ubuntu0.24.04.10Not reportedNot reportedNot reported
Ubuntuphp8.3-pspelldebnoble8.3.6-0ubuntu0.24.04.10Not reportedNot reportedNot reported
Ubuntuphp8.3-readlinedebnoble8.3.6-0ubuntu0.24.04.10Not reportedNot reportedNot reported
Ubuntuphp8.3-snmpdebnoble8.3.6-0ubuntu0.24.04.10Not reportedNot reportedNot reported
Ubuntuphp8.3-soapdebnoble8.3.6-0ubuntu0.24.04.10Not reportedNot reportedNot reported
Ubuntuphp8.3-sqlite3debnoble8.3.6-0ubuntu0.24.04.10Not reportedNot reportedNot reported
Ubuntuphp8.3-sybasedebnoble8.3.6-0ubuntu0.24.04.10Not reportedNot reportedNot reported
Ubuntuphp8.3-tidydebnoble8.3.6-0ubuntu0.24.04.10Not reportedNot reportedNot reported
Ubuntuphp8.3-xmldebnoble8.3.6-0ubuntu0.24.04.10Not reportedNot reportedNot reported
Ubuntuphp8.3-xsldebnoble8.3.6-0ubuntu0.24.04.10Not reportedNot reportedNot reported
Ubuntuphp8.3-zipdebnoble8.3.6-0ubuntu0.24.04.10Not reportedNot reportedNot reported
Suseapache2-mod_php8rpmlinux enterprise module for web and scripting 15 sp78.3.32-150700.3.15.1Not reportedSUSE-SU-2026:3164-1Not reported
Susephp8rpmlinux enterprise module for web and scripting 15 sp78.3.32-150700.3.15.1Not reportedSUSE-SU-2026:3164-1Not reported
Susephp8-embedrpmlinux enterprise module for web and scripting 15 sp78.3.32-150700.3.15.1Not reportedSUSE-SU-2026:3164-1Not reported
Susephp8-fastcgirpmlinux enterprise module for web and scripting 15 sp78.3.32-150700.3.15.1Not reportedSUSE-SU-2026:3164-1Not reported
Susephp8-fpmrpmlinux enterprise module for web and scripting 15 sp78.3.32-150700.3.15.1Not reportedSUSE-SU-2026:3164-1Not reported
Susephp8-testrpmlinux enterprise module for web and scripting 15 sp78.3.32-150700.3.15.1Not reportedSUSE-SU-2026:3164-1Not reported
Ubuntuphp8.1deb22.048.1.2-1ubuntu2.25Not reportedUSN-8564-1Not reported
Ubuntuphp8.3deb24.048.3.6-0ubuntu0.24.04.10Not reportedUSN-8564-1Not reported
Ubuntuphp8.5deb26.048.5.4-0ubuntu1.2Not reportedUSN-8564-1Not reported
Ubuntuphp8.5deb26.048.5.4-0ubuntu1.2Not reportedUBUNTU-CVE-2026-12184Not reported
Suseapache2-mod_php8rpmlinux enterprise server 16.08.4.23-160000.1.1Not reportedSUSE-SU-2026:22635-1Not reported
Susephp8rpmlinux enterprise server 16.08.4.23-160000.1.1Not reportedSUSE-SU-2026:22635-1Not reported
Susephp8-embedrpmlinux enterprise server 16.08.4.23-160000.1.1Not reportedSUSE-SU-2026:22635-1Not reported
Susephp8-fastcgirpmlinux enterprise server 16.08.4.23-160000.1.1Not reportedSUSE-SU-2026:22635-1Not reported
Susephp8-fpmrpmlinux enterprise server 16.08.4.23-160000.1.1Not reportedSUSE-SU-2026:22635-1Not reported
Suseapache2-mod_php8rpmlinux enterprise server for sap applications 16.08.4.23-160000.1.1Not reportedSUSE-SU-2026:22635-1Not reported
Susephp8rpmlinux enterprise server for sap applications 16.08.4.23-160000.1.1Not reportedSUSE-SU-2026:22635-1Not reported
Susephp8-embedrpmlinux enterprise server for sap applications 16.08.4.23-160000.1.1Not reportedSUSE-SU-2026:22635-1Not reported
Susephp8-fastcgirpmlinux enterprise server for sap applications 16.08.4.23-160000.1.1Not reportedSUSE-SU-2026:22635-1Not reported
Susephp8-fpmrpmlinux enterprise server for sap applications 16.08.4.23-160000.1.1Not reportedSUSE-SU-2026:22635-1Not reported
Opensusephp8rpmtumbleweed8.5.8-1.1Not reportedOPENSUSE-SU-2026:11269-1Not reported
Opensuseapache2-mod_php8rpmleap 16.08.4.23-160000.1.1Not reportedOPENSUSE-SU-2026:21308-1Not reported
Opensusephp8rpmleap 16.08.4.23-160000.1.1Not reportedOPENSUSE-SU-2026:21308-1Not reported
Opensusephp8-embedrpmleap 16.08.4.23-160000.1.1Not reportedOPENSUSE-SU-2026:21308-1Not reported
Opensusephp8-fastcgirpmleap 16.08.4.23-160000.1.1Not reportedOPENSUSE-SU-2026:21308-1Not reported
Opensusephp8-fpmrpmleap 16.08.4.23-160000.1.1Not reportedOPENSUSE-SU-2026:21308-1Not reported
Opensusephp8-testrpmleap 16.08.4.23-160000.1.1Not reportedOPENSUSE-SU-2026:21308-1Not reported

OpenFactory catalog packages

[openSUSE Tumbleweed]

  • [php8-bcmath]Unknown

    Source package: [php8]

    Details (1)
    • 8.5.9-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 8.5.8-1.1

      Version impact unknown

      usn · php8 · opensuse · tumbleweed

  • [php8-bz2]Unknown

    Source package: [php8]

    Details (1)
    • 8.5.9-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 8.5.8-1.1

      Version impact unknown

      usn · php8 · opensuse · tumbleweed

  • [php8-calendar]Unknown

    Source package: [php8]

    Details (1)
    • 8.5.9-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 8.5.8-1.1

      Version impact unknown

      usn · php8 · opensuse · tumbleweed

  • [php8-cli]Unknown

    Source package: [php8]

    Details (1)
    • 8.5.9-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 8.5.8-1.1

      Version impact unknown

      usn · php8 · opensuse · tumbleweed

  • [php8-ctype]Unknown

    Source package: [php8]

    Details (1)
    • 8.5.9-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 8.5.8-1.1

      Version impact unknown

      usn · php8 · opensuse · tumbleweed

  • [php8-curl]Unknown

    Source package: [php8]

    Details (1)
    • 8.5.9-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 8.5.8-1.1

      Version impact unknown

      usn · php8 · opensuse · tumbleweed

  • [php8-dba]Unknown

    Source package: [php8]

    Details (1)
    • 8.5.9-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 8.5.8-1.1

      Version impact unknown

      usn · php8 · opensuse · tumbleweed

  • [php8-devel]Unknown

    Source package: [php8]

    Details (1)
    • 8.5.9-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 8.5.8-1.1

      Version impact unknown

      usn · php8 · opensuse · tumbleweed

  • [php8-dom]Unknown

    Source package: [php8]

    Details (1)
    • 8.5.9-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 8.5.8-1.1

      Version impact unknown

      usn · php8 · opensuse · tumbleweed

  • [php8-enchant]Unknown

    Source package: [php8]

    Details (1)
    • 8.5.9-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 8.5.8-1.1

      Version impact unknown

      usn · php8 · opensuse · tumbleweed

  • [php8-exif]Unknown

    Source package: [php8]

    Details (1)
    • 8.5.9-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 8.5.8-1.1

      Version impact unknown

      usn · php8 · opensuse · tumbleweed

  • [php8-ffi]Unknown

    Source package: [php8]

    Details (1)
    • 8.5.9-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 8.5.8-1.1

      Version impact unknown

      usn · php8 · opensuse · tumbleweed

  • [php8-fileinfo]Unknown

    Source package: [php8]

    Details (1)
    • 8.5.9-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 8.5.8-1.1

      Version impact unknown

      usn · php8 · opensuse · tumbleweed

  • [php8-ftp]Unknown

    Source package: [php8]

    Details (1)
    • 8.5.9-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 8.5.8-1.1

      Version impact unknown

      usn · php8 · opensuse · tumbleweed

  • [php8-gd]Unknown

    Source package: [php8]

    Details (1)
    • 8.5.9-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 8.5.8-1.1

      Version impact unknown

      usn · php8 · opensuse · tumbleweed

  • [php8-gettext]Unknown

    Source package: [php8]

    Details (1)
    • 8.5.9-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 8.5.8-1.1

      Version impact unknown

      usn · php8 · opensuse · tumbleweed

  • [php8-gmp]Unknown

    Source package: [php8]

    Details (1)
    • 8.5.9-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 8.5.8-1.1

      Version impact unknown

      usn · php8 · opensuse · tumbleweed

  • [php8-iconv]Unknown

    Source package: [php8]

    Details (1)
    • 8.5.9-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 8.5.8-1.1

      Version impact unknown

      usn · php8 · opensuse · tumbleweed

  • [php8-intl]Unknown

    Source package: [php8]

    Details (1)
    • 8.5.9-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 8.5.8-1.1

      Version impact unknown

      usn · php8 · opensuse · tumbleweed

  • [php8-ldap]Unknown

    Source package: [php8]

    Details (1)
    • 8.5.9-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 8.5.8-1.1

      Version impact unknown

      usn · php8 · opensuse · tumbleweed

Next results

Observed:

References