CVE catalog
CVE-2026-17545
On Windows, PHP's filesystem and stream APIs do not reject reserved device names such as CON, PRN, AUX, NUL, COM1 to COM9, LPT1 to LPT9, CONIN$ and CONOUT$ when they appear as a component of a path. A
- Severity
- Medium · CVSS 6.9
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 0.37% · Oct 27, 2026
On Windows, PHP's filesystem and stream APIs do not reject reserved device names such as CON, PRN, AUX, NUL, COM1 to COM9, LPT1 to LPT9, CONIN$ and CONOUT$ when they appear as a component of a path. An attacker-controlled filename therefore reaches CreateFileW() and opens a device instead of the regular file the application expected, which can block or hang the request and exhaust worker processes.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | php8.2 | bookworm | 8.2.32-1~deb12u1 | not affected |
| Debian | php8.2 | bookworm-security | 8.2.35-1~deb12u1 | not affected |
| Ubuntu | php5 | pro | 5.5.3+dfsg-1ubuntu2 | vulnerable |
| Ubuntu | php5 | pro | 5.5.3+dfsg-1ubuntu3 | vulnerable |
| Ubuntu | php5 | pro | 5.5.6+dfsg-1ubuntu1 | vulnerable |
| Ubuntu | php5 | pro | 5.5.6+dfsg-1ubuntu2 | vulnerable |
| Ubuntu | php5 | pro | 5.5.8+dfsg-2ubuntu1 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu1 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu2 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu3 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.1 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.2 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.3 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.4 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.5 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.6 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.7 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.9 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.11 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.12 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.13 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.14 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.16 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.17 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.19 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.20 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.21 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.22 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.23 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.24 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.25 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.26 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.27 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.29 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.29+esm1 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.29+esm2 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.29+esm3 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.29+esm4 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.29+esm5 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.29+esm6 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.29+esm8 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.29+esm10 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.29+esm11 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.29+esm12 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.29+esm13 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.29+esm14 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.29+esm15 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.29+esm16 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.29+esm17 | vulnerable |
| Ubuntu | php5 | pro | 5.5.9+dfsg-1ubuntu4.29+esm18 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.1-5 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.1-6 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.2-1 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.2-3 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.2-4 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.2-5 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.3-2 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.3-3 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.3-9ubuntu1 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.4-5ubuntu1 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.4-5ubuntu2 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.4-7ubuntu1 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.4-7ubuntu2 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.4-7ubuntu2.1 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.8-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.8-0ubuntu0.16.04.2 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.8-0ubuntu0.16.04.3 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.13-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.15-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.15-0ubuntu0.16.04.2 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.15-0ubuntu0.16.04.4 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.18-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.22-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.25-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.28-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.30-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.32-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.2 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.3 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.4 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.5 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.6 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.7 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.9 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.11 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.12 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.14 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.15 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.16 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.16+esm1 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.16+esm2 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.16+esm3 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.16+esm4 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.16+esm5 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.16+esm6 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.16+esm7 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.16+esm8 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.16+esm9 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.16+esm10 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.16+esm11 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.16+esm12 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.16+esm13 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.16+esm14 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.16+esm15 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.16+esm16 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.16+esm17 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.16+esm18 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.16+esm19 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.16+esm20 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.16+esm21 | vulnerable |
| Ubuntu | php7.0 | pro | 7.0.33-0ubuntu0.16.04.16+esm22 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.1-1ubuntu2 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.2-1ubuntu1 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.2-1ubuntu2 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.3-1ubuntu1 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.5-0ubuntu0.18.04.1 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.7-0ubuntu0.18.04.1 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.7-0ubuntu0.18.04.2 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.10-0ubuntu0.18.04.1 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.15-0ubuntu0.18.04.1 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.15-0ubuntu0.18.04.2 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.17-0ubuntu0.18.04.1 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.19-0ubuntu0.18.04.1 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.19-0ubuntu0.18.04.2 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.24-0ubuntu0.18.04.1 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.24-0ubuntu0.18.04.2 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.24-0ubuntu0.18.04.3 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.24-0ubuntu0.18.04.4 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.24-0ubuntu0.18.04.6 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.24-0ubuntu0.18.04.7 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.24-0ubuntu0.18.04.8 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.24-0ubuntu0.18.04.9 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.24-0ubuntu0.18.04.10 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.24-0ubuntu0.18.04.11 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.24-0ubuntu0.18.04.12 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.24-0ubuntu0.18.04.13 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.24-0ubuntu0.18.04.15 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.24-0ubuntu0.18.04.16 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.24-0ubuntu0.18.04.17 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.24-0ubuntu0.18.04.17+esm1 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.24-0ubuntu0.18.04.17+esm2 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.24-0ubuntu0.18.04.17+esm3 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.24-0ubuntu0.18.04.17+esm4 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.24-0ubuntu0.18.04.17+esm5 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.24-0ubuntu0.18.04.17+esm6 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.24-0ubuntu0.18.04.17+esm7 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.24-0ubuntu0.18.04.17+esm8 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.24-0ubuntu0.18.04.17+esm9 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.24-0ubuntu0.18.04.17+esm10 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.24-0ubuntu0.18.04.17+esm11 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.24-0ubuntu0.18.04.17+esm12 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.24-0ubuntu0.18.04.17+esm13 | vulnerable |
| Ubuntu | php7.2 | pro | 7.2.24-0ubuntu0.18.04.17+esm14 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4build1 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4build2 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4ubuntu1 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4ubuntu1.1 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4ubuntu2.2 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4ubuntu2.4 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4ubuntu2.5 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4ubuntu2.6 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4ubuntu2.7 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4ubuntu2.8 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4ubuntu2.9 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4ubuntu2.10 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4ubuntu2.11 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4ubuntu2.12 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4ubuntu2.13 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4ubuntu2.15 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4ubuntu2.16 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4ubuntu2.17 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4ubuntu2.18 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4ubuntu2.19 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4ubuntu2.20 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4ubuntu2.22 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4ubuntu2.23 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4ubuntu2.24 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4ubuntu2.26 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4ubuntu2.28 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4ubuntu2.29 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4ubuntu2.29+esm1 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4ubuntu2.29+esm2 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4ubuntu2.29+esm3 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4ubuntu2.29+esm4 | vulnerable |
| Ubuntu | php7.4 | pro | 7.4.3-4ubuntu2.29+esm5 | vulnerable |
| Ubuntu | php8.1 | 22.04 | 8.1.0~rc4-1ubuntu2 | vulnerable |
| Ubuntu | php8.1 | 22.04 | 8.1.0-1 | vulnerable |
| Ubuntu | php8.1 | 22.04 | 8.1.2-1ubuntu1 | vulnerable |
| Ubuntu | php8.1 | 22.04 | 8.1.2-1ubuntu2 | vulnerable |
| Ubuntu | php8.1 | 22.04 | 8.1.2-1ubuntu2.1 | vulnerable |
| Ubuntu | php8.1 | 22.04 | 8.1.2-1ubuntu2.2 | vulnerable |
| Ubuntu | php8.1 | 22.04 | 8.1.2-1ubuntu2.3 | vulnerable |
| Ubuntu | php8.1 | 22.04 | 8.1.2-1ubuntu2.4 | vulnerable |
| Ubuntu | php8.1 | 22.04 | 8.1.2-1ubuntu2.5 | vulnerable |
| Ubuntu | php8.1 | 22.04 | 8.1.2-1ubuntu2.6 | vulnerable |
| Ubuntu | php8.1 | 22.04 | 8.1.2-1ubuntu2.8 | vulnerable |
| Ubuntu | php8.1 | 22.04 | 8.1.2-1ubuntu2.9 | vulnerable |
| Ubuntu | php8.1 | 22.04 | 8.1.2-1ubuntu2.10 | vulnerable |
| Ubuntu | php8.1 | 22.04 | 8.1.2-1ubuntu2.11 | vulnerable |
| Ubuntu | php8.1 | 22.04 | 8.1.2-1ubuntu2.13 | vulnerable |
| Ubuntu | php8.1 | 22.04 | 8.1.2-1ubuntu2.14 | vulnerable |
| Ubuntu | php8.1 | 22.04 | 8.1.2-1ubuntu2.15 | vulnerable |
| Ubuntu | php8.1 | 22.04 | 8.1.2-1ubuntu2.17 | vulnerable |
| Ubuntu | php8.1 | 22.04 | 8.1.2-1ubuntu2.18 | vulnerable |
| Ubuntu | php8.1 | 22.04 | 8.1.2-1ubuntu2.19 | vulnerable |
| Ubuntu | php8.1 | 22.04 | 8.1.2-1ubuntu2.20 | vulnerable |
| Ubuntu | php8.1 | 22.04 | 8.1.2-1ubuntu2.21 | vulnerable |
| Ubuntu | php8.1 | 22.04 | 8.1.2-1ubuntu2.22 | vulnerable |
| Ubuntu | php8.1 | 22.04 | 8.1.2-1ubuntu2.23 | vulnerable |
| Ubuntu | php8.1 | 22.04 | 8.1.2-1ubuntu2.24 | vulnerable |
| Ubuntu | php8.1 | 22.04 | 8.1.2-1ubuntu2.25 | vulnerable |
| Ubuntu | php8.1 | 22.04 | 8.1.2-1ubuntu2.26 | vulnerable |
| Ubuntu | php8.1 | 22.04 | 8.1.2-1ubuntu2.27 | vulnerable |
| Ubuntu | php8.1 | 22.04 | 8.1.2-1ubuntu2.28 | vulnerable |
| Ubuntu | php8.3 | 24.04 | 8.3.0-1 | vulnerable |
| Ubuntu | php8.3 | 24.04 | 8.3.0-1ubuntu1 | vulnerable |
| Ubuntu | php8.3 | 24.04 | 8.3.4-1 | vulnerable |
| Ubuntu | php8.3 | 24.04 | 8.3.4-1build1 | vulnerable |
| Ubuntu | php8.3 | 24.04 | 8.3.6-0maysync1 | vulnerable |
| Ubuntu | php8.3 | 24.04 | 8.3.6-0ubuntu0.24.04.1 | vulnerable |
| Ubuntu | php8.3 | 24.04 | 8.3.6-0ubuntu0.24.04.2 | vulnerable |
| Ubuntu | php8.3 | 24.04 | 8.3.6-0ubuntu0.24.04.3 | vulnerable |
| Ubuntu | php8.3 | 24.04 | 8.3.6-0ubuntu0.24.04.4 | vulnerable |
| Ubuntu | php8.3 | 24.04 | 8.3.6-0ubuntu0.24.04.5 | vulnerable |
| Ubuntu | php8.3 | 24.04 | 8.3.6-0ubuntu0.24.04.6 | vulnerable |
| Ubuntu | php8.3 | 24.04 | 8.3.6-0ubuntu0.24.04.7 | vulnerable |
| Ubuntu | php8.3 | 24.04 | 8.3.6-0ubuntu0.24.04.8 | vulnerable |
| Ubuntu | php8.3 | 24.04 | 8.3.6-0ubuntu0.24.04.9 | vulnerable |
| Ubuntu | php8.3 | 24.04 | 8.3.6-0ubuntu0.24.04.10 | vulnerable |
| Ubuntu | php8.3 | 24.04 | 8.3.6-0ubuntu0.24.04.11 | vulnerable |
| Ubuntu | php8.3 | 24.04 | 8.3.6-0ubuntu0.24.04.12 | vulnerable |
| Ubuntu | php8.3 | 24.04 | 8.3.6-0ubuntu0.24.04.13 | vulnerable |
| Ubuntu | php8.5 | 26.04 | 8.5.2-0ubuntu1 | vulnerable |
| Ubuntu | php8.5 | 26.04 | 8.5.4-0ubuntu1 | vulnerable |
| Ubuntu | php8.5 | 26.04 | 8.5.4-0ubuntu1.1 | vulnerable |
| Ubuntu | php8.5 | 26.04 | 8.5.4-0ubuntu1.2 | vulnerable |
| Ubuntu | php8.5 | 26.04 | 8.5.4-0ubuntu1.3 | vulnerable |
| Ubuntu | php8.5 | 26.04 | 8.5.4-0ubuntu1.4 | vulnerable |
| Ubuntu | php8.5 | 26.04 | 8.5.4-0ubuntu1.5 | vulnerable |
| Cpe | php | Not reported | 8.5.11 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | php8.2 | source | bookworm | Not affected | unimportant | Not reported | Not reported |
| Cpe | php | cpe | Not reported | 8.5.11 | Not reported | NVD-CVE-2026-17545 | Not reported |
OpenFactory catalog packages
[Debian 12 (Bookworm)]
- [libapache2-mod-php8.2]Not affected
Source package: [php8.2]
Details (4)
8.2.32-1~deb12u1· amd64 · bookwormNot affected
nvd · php8.2 · debian · bookworm
8.2.32-1~deb12u1· arm64 · bookwormNot affected
nvd · php8.2 · debian · bookworm
8.2.33-1~deb12u1· amd64 · bookworm-securityNot affected
nvd · php8.2 · debian · bookworm
8.2.33-1~deb12u1· arm64 · bookworm-securityNot affected
nvd · php8.2 · debian · bookworm
- [libphp8.2-embed]Not affected
Source package: [php8.2]
Details (4)
8.2.32-1~deb12u1· amd64 · bookwormNot affected
nvd · php8.2 · debian · bookworm
8.2.32-1~deb12u1· arm64 · bookwormNot affected
nvd · php8.2 · debian · bookworm
8.2.33-1~deb12u1· amd64 · bookworm-securityNot affected
nvd · php8.2 · debian · bookworm
8.2.33-1~deb12u1· arm64 · bookworm-securityNot affected
nvd · php8.2 · debian · bookworm
- [php8.2]Not affected
Details (4)
8.2.32-1~deb12u1· all · bookwormNot affected
nvd · php8.2 · debian · bookworm
8.2.32-1~deb12u1· all · bookwormNot affected
nvd · php8.2 · debian · bookworm
8.2.33-1~deb12u1· all · bookworm-securityNot affected
nvd · php8.2 · debian · bookworm
8.2.33-1~deb12u1· all · bookworm-securityNot affected
nvd · php8.2 · debian · bookworm
- [php8.2-bcmath]Not affected
Source package: [php8.2]
Details (4)
8.2.32-1~deb12u1· amd64 · bookwormNot affected
nvd · php8.2 · debian · bookworm
8.2.32-1~deb12u1· arm64 · bookwormNot affected
nvd · php8.2 · debian · bookworm
8.2.33-1~deb12u1· amd64 · bookworm-securityNot affected
nvd · php8.2 · debian · bookworm
8.2.33-1~deb12u1· arm64 · bookworm-securityNot affected
nvd · php8.2 · debian · bookworm
- [php8.2-bz2]Not affected
Source package: [php8.2]
Details (4)
8.2.32-1~deb12u1· amd64 · bookwormNot affected
nvd · php8.2 · debian · bookworm
8.2.32-1~deb12u1· arm64 · bookwormNot affected
nvd · php8.2 · debian · bookworm
8.2.33-1~deb12u1· amd64 · bookworm-securityNot affected
nvd · php8.2 · debian · bookworm
8.2.33-1~deb12u1· arm64 · bookworm-securityNot affected
nvd · php8.2 · debian · bookworm
- [php8.2-cgi]Not affected
Source package: [php8.2]
Details (4)
8.2.32-1~deb12u1· amd64 · bookwormNot affected
nvd · php8.2 · debian · bookworm
8.2.32-1~deb12u1· arm64 · bookwormNot affected
nvd · php8.2 · debian · bookworm
8.2.33-1~deb12u1· amd64 · bookworm-securityNot affected
nvd · php8.2 · debian · bookworm
8.2.33-1~deb12u1· arm64 · bookworm-securityNot affected
nvd · php8.2 · debian · bookworm
- [php8.2-cli]Not affected
Source package: [php8.2]
Details (4)
8.2.32-1~deb12u1· amd64 · bookwormNot affected
nvd · php8.2 · debian · bookworm
8.2.32-1~deb12u1· arm64 · bookwormNot affected
nvd · php8.2 · debian · bookworm
8.2.33-1~deb12u1· amd64 · bookworm-securityNot affected
nvd · php8.2 · debian · bookworm
8.2.33-1~deb12u1· arm64 · bookworm-securityNot affected
nvd · php8.2 · debian · bookworm
- [php8.2-common]Not affected
Source package: [php8.2]
Details (4)
8.2.32-1~deb12u1· amd64 · bookwormNot affected
nvd · php8.2 · debian · bookworm
8.2.32-1~deb12u1· arm64 · bookwormNot affected
nvd · php8.2 · debian · bookworm
8.2.33-1~deb12u1· amd64 · bookworm-securityNot affected
nvd · php8.2 · debian · bookworm
8.2.33-1~deb12u1· arm64 · bookworm-securityNot affected
nvd · php8.2 · debian · bookworm
- [php8.2-curl]Not affected
Source package: [php8.2]
Details (4)
8.2.32-1~deb12u1· amd64 · bookwormNot affected
nvd · php8.2 · debian · bookworm
8.2.32-1~deb12u1· arm64 · bookwormNot affected
nvd · php8.2 · debian · bookworm
8.2.33-1~deb12u1· amd64 · bookworm-securityNot affected
nvd · php8.2 · debian · bookworm
8.2.33-1~deb12u1· arm64 · bookworm-securityNot affected
nvd · php8.2 · debian · bookworm
- [php8.2-dba]Not affected
Source package: [php8.2]
Details (4)
8.2.32-1~deb12u1· amd64 · bookwormNot affected
nvd · php8.2 · debian · bookworm
8.2.32-1~deb12u1· arm64 · bookwormNot affected
nvd · php8.2 · debian · bookworm
8.2.33-1~deb12u1· amd64 · bookworm-securityNot affected
nvd · php8.2 · debian · bookworm
8.2.33-1~deb12u1· arm64 · bookworm-securityNot affected
nvd · php8.2 · debian · bookworm
- [php8.2-dev]Not affected
Source package: [php8.2]
Details (4)
8.2.32-1~deb12u1· amd64 · bookwormNot affected
nvd · php8.2 · debian · bookworm
8.2.32-1~deb12u1· arm64 · bookwormNot affected
nvd · php8.2 · debian · bookworm
8.2.33-1~deb12u1· amd64 · bookworm-securityNot affected
nvd · php8.2 · debian · bookworm
8.2.33-1~deb12u1· arm64 · bookworm-securityNot affected
nvd · php8.2 · debian · bookworm
- [php8.2-enchant]Not affected
Source package: [php8.2]
Details (4)
8.2.32-1~deb12u1· amd64 · bookwormNot affected
nvd · php8.2 · debian · bookworm
8.2.32-1~deb12u1· arm64 · bookwormNot affected
nvd · php8.2 · debian · bookworm
8.2.33-1~deb12u1· amd64 · bookworm-securityNot affected
nvd · php8.2 · debian · bookworm
8.2.33-1~deb12u1· arm64 · bookworm-securityNot affected
nvd · php8.2 · debian · bookworm
- [php8.2-fpm]Not affected
Source package: [php8.2]
Details (4)
8.2.32-1~deb12u1· amd64 · bookwormNot affected
nvd · php8.2 · debian · bookworm
8.2.32-1~deb12u1· arm64 · bookwormNot affected
nvd · php8.2 · debian · bookworm
8.2.33-1~deb12u1· amd64 · bookworm-securityNot affected
nvd · php8.2 · debian · bookworm
8.2.33-1~deb12u1· arm64 · bookworm-securityNot affected
nvd · php8.2 · debian · bookworm
- [php8.2-gd]Not affected
Source package: [php8.2]
Details (4)
8.2.32-1~deb12u1· amd64 · bookwormNot affected
nvd · php8.2 · debian · bookworm
8.2.32-1~deb12u1· arm64 · bookwormNot affected
nvd · php8.2 · debian · bookworm
8.2.33-1~deb12u1· amd64 · bookworm-securityNot affected
nvd · php8.2 · debian · bookworm
8.2.33-1~deb12u1· arm64 · bookworm-securityNot affected
nvd · php8.2 · debian · bookworm
- [php8.2-gmp]Not affected
Source package: [php8.2]
Details (4)
8.2.32-1~deb12u1· amd64 · bookwormNot affected
nvd · php8.2 · debian · bookworm
8.2.32-1~deb12u1· arm64 · bookwormNot affected
nvd · php8.2 · debian · bookworm
8.2.33-1~deb12u1· amd64 · bookworm-securityNot affected
nvd · php8.2 · debian · bookworm
8.2.33-1~deb12u1· arm64 · bookworm-securityNot affected
nvd · php8.2 · debian · bookworm
- [php8.2-imap]Not affected
Source package: [php8.2]
Details (4)
8.2.32-1~deb12u1· amd64 · bookwormNot affected
nvd · php8.2 · debian · bookworm
8.2.32-1~deb12u1· arm64 · bookwormNot affected
nvd · php8.2 · debian · bookworm
8.2.33-1~deb12u1· amd64 · bookworm-securityNot affected
nvd · php8.2 · debian · bookworm
8.2.33-1~deb12u1· arm64 · bookworm-securityNot affected
nvd · php8.2 · debian · bookworm
- [php8.2-interbase]Not affected
Source package: [php8.2]
Details (4)
8.2.32-1~deb12u1· amd64 · bookwormNot affected
nvd · php8.2 · debian · bookworm
8.2.32-1~deb12u1· arm64 · bookwormNot affected
nvd · php8.2 · debian · bookworm
8.2.33-1~deb12u1· amd64 · bookworm-securityNot affected
nvd · php8.2 · debian · bookworm
8.2.33-1~deb12u1· arm64 · bookworm-securityNot affected
nvd · php8.2 · debian · bookworm
- [php8.2-intl]Not affected
Source package: [php8.2]
Details (4)
8.2.32-1~deb12u1· amd64 · bookwormNot affected
nvd · php8.2 · debian · bookworm
8.2.32-1~deb12u1· arm64 · bookwormNot affected
nvd · php8.2 · debian · bookworm
8.2.33-1~deb12u1· amd64 · bookworm-securityNot affected
nvd · php8.2 · debian · bookworm
8.2.33-1~deb12u1· arm64 · bookworm-securityNot affected
nvd · php8.2 · debian · bookworm
- [php8.2-ldap]Not affected
Source package: [php8.2]
Details (4)
8.2.32-1~deb12u1· amd64 · bookwormNot affected
nvd · php8.2 · debian · bookworm
8.2.32-1~deb12u1· arm64 · bookwormNot affected
nvd · php8.2 · debian · bookworm
8.2.33-1~deb12u1· amd64 · bookworm-securityNot affected
nvd · php8.2 · debian · bookworm
8.2.33-1~deb12u1· arm64 · bookworm-securityNot affected
nvd · php8.2 · debian · bookworm
- [php8.2-mbstring]Not affected
Source package: [php8.2]
Details (4)
8.2.32-1~deb12u1· amd64 · bookwormNot affected
nvd · php8.2 · debian · bookworm
8.2.32-1~deb12u1· arm64 · bookwormNot affected
nvd · php8.2 · debian · bookworm
8.2.33-1~deb12u1· amd64 · bookworm-securityNot affected
nvd · php8.2 · debian · bookworm
8.2.33-1~deb12u1· arm64 · bookworm-securityNot affected
nvd · php8.2 · debian · bookworm
Observed:
References
- [https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11901-1.json]
- [https://nvd.nist.gov/vuln/detail/CVE-2026-17545]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2026-17545]
- [https://security-tracker.debian.org/tracker/CVE-2026-17545]
- [https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-17545.json]
- [https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3585.json]
[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]