CVE catalog

CVE-2026-6735

In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, 8.5.* before 8.5.6, due to improper sanitation of user data, it allows an attacker to compose an URL, which will cause th

[CVE catalog]

Severity
High · CVSS 7.3
Published
Source
[NVD] · [CVE record]
EPSS
0.19% · Oct 25, 2026

In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, 8.5.* before 8.5.6, due to improper sanitation of user data, it allows an attacker to compose an URL, which will cause the target to execute arbitrary JavaScript code (XSS) on the target's machine when the target is viewing the PHP-FPM status page.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianphp8.2bookworm8.2.32-1~deb12u1fixed
Debianphp8.2bookworm-security8.2.35-1~deb12u1fixed
Cpephp8.3Not reported8.3.6-0ubuntu0.24.04.9fixed
Cpelibapache2-mod-php8.3Not reported8.3.6-0ubuntu0.24.04.9fixed
Cpelibphp8.3-embedNot reported8.3.6-0ubuntu0.24.04.9fixed
Cpephp8.3-bcmathNot reported8.3.6-0ubuntu0.24.04.9fixed
Cpephp8.3-bz2Not reported8.3.6-0ubuntu0.24.04.9fixed
Cpephp8.3-cgiNot reported8.3.6-0ubuntu0.24.04.9fixed
Cpephp8.3-cliNot reported8.3.6-0ubuntu0.24.04.9fixed
Cpephp8.3-commonNot reported8.3.6-0ubuntu0.24.04.9fixed
Cpephp8.3-curlNot reported8.3.6-0ubuntu0.24.04.9fixed
Cpephp8.3-dbaNot reported8.3.6-0ubuntu0.24.04.9fixed
Cpephp8.3-devNot reported8.3.6-0ubuntu0.24.04.9fixed
Cpephp8.3-enchantNot reported8.3.6-0ubuntu0.24.04.9fixed
Cpephp8.3-fpmNot reported8.3.6-0ubuntu0.24.04.9fixed
Cpephp8.3-gdNot reported8.3.6-0ubuntu0.24.04.9fixed
Cpephp8.3-gmpNot reported8.3.6-0ubuntu0.24.04.9fixed
Cpephp8.3-imapNot reported8.3.6-0ubuntu0.24.04.9fixed
Cpephp8.3-interbaseNot reported8.3.6-0ubuntu0.24.04.9fixed
Cpephp8.3-intlNot reported8.3.6-0ubuntu0.24.04.9fixed
Cpephp8.3-ldapNot reported8.3.6-0ubuntu0.24.04.9fixed
Cpephp8.3-mbstringNot reported8.3.6-0ubuntu0.24.04.9fixed
Cpephp8.3-mysqlNot reported8.3.6-0ubuntu0.24.04.9fixed
Cpephp8.3-odbcNot reported8.3.6-0ubuntu0.24.04.9fixed
Cpephp8.3-opcacheNot reported8.3.6-0ubuntu0.24.04.9fixed
Cpephp8.3-pgsqlNot reported8.3.6-0ubuntu0.24.04.9fixed
Cpephp8.3-phpdbgNot reported8.3.6-0ubuntu0.24.04.9fixed
Cpephp8.3-pspellNot reported8.3.6-0ubuntu0.24.04.9fixed
Cpephp8.3-readlineNot reported8.3.6-0ubuntu0.24.04.9fixed
Cpephp8.3-snmpNot reported8.3.6-0ubuntu0.24.04.9fixed
Cpephp8.3-soapNot reported8.3.6-0ubuntu0.24.04.9fixed
Cpephp8.3-sqlite3Not reported8.3.6-0ubuntu0.24.04.9fixed
Cpephp8.3-sybaseNot reported8.3.6-0ubuntu0.24.04.9fixed
Cpephp8.3-tidyNot reported8.3.6-0ubuntu0.24.04.9fixed
Cpephp8.3-xmlNot reported8.3.6-0ubuntu0.24.04.9fixed
Cpephp8.3-xslNot reported8.3.6-0ubuntu0.24.04.9fixed
Cpephp8.3-zipNot reported8.3.6-0ubuntu0.24.04.9fixed
CpephpNot reported8.2.31fixed
CpephpNot reported8.3.31fixed
CpephpNot reported8.4.21fixed
CpephpNot reported8.5.6fixed
Ubuntuphp5pro5.5.3+dfsg-1ubuntu2vulnerable
Ubuntuphp5pro5.5.3+dfsg-1ubuntu3vulnerable
Ubuntuphp5pro5.5.6+dfsg-1ubuntu1vulnerable
Ubuntuphp5pro5.5.6+dfsg-1ubuntu2vulnerable
Ubuntuphp5pro5.5.8+dfsg-2ubuntu1vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu1vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu2vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu3vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.1vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.2vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.3vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.4vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.5vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.6vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.7vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.9vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.11vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.12vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.13vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.14vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.16vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.17vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.19vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.20vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.21vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.22vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.23vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.24vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.25vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.26vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.27vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm1vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm2vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm3vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm4vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm5vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm6vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm8vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm10vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm11vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm12vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm13vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm14vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm15vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm16vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm17vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm18vulnerable
Ubuntuphp7.0pro7.0.1-5vulnerable
Ubuntuphp7.0pro7.0.1-6vulnerable
Ubuntuphp7.0pro7.0.2-1vulnerable
Ubuntuphp7.0pro7.0.2-3vulnerable
Ubuntuphp7.0pro7.0.2-4vulnerable
Ubuntuphp7.0pro7.0.2-5vulnerable
Ubuntuphp7.0pro7.0.3-2vulnerable
Ubuntuphp7.0pro7.0.3-3vulnerable
Ubuntuphp7.0pro7.0.3-9ubuntu1vulnerable
Ubuntuphp7.0pro7.0.4-5ubuntu1vulnerable
Ubuntuphp7.0pro7.0.4-5ubuntu2vulnerable
Ubuntuphp7.0pro7.0.4-7ubuntu1vulnerable
Ubuntuphp7.0pro7.0.4-7ubuntu2vulnerable
Ubuntuphp7.0pro7.0.4-7ubuntu2.1vulnerable
Ubuntuphp7.0pro7.0.8-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.0pro7.0.8-0ubuntu0.16.04.2vulnerable
Ubuntuphp7.0pro7.0.8-0ubuntu0.16.04.3vulnerable
Ubuntuphp7.0pro7.0.13-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.0pro7.0.15-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.0pro7.0.15-0ubuntu0.16.04.2vulnerable
Ubuntuphp7.0pro7.0.15-0ubuntu0.16.04.4vulnerable
Ubuntuphp7.0pro7.0.18-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.0pro7.0.22-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.0pro7.0.25-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.0pro7.0.28-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.0pro7.0.30-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.0pro7.0.32-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.2vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.3vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.4vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.5vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.6vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.7vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.9vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.11vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.12vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.14vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.15vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm1vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm2vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm3vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm4vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm5vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm6vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm7vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm8vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm9vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm10vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm11vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm12vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm13vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm14vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm15vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm16vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm17vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm18vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm19vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm20vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm21vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm22vulnerable
Ubuntuphp7.2pro7.2.1-1ubuntu2vulnerable
Ubuntuphp7.2pro7.2.2-1ubuntu1vulnerable
Ubuntuphp7.2pro7.2.2-1ubuntu2vulnerable
Ubuntuphp7.2pro7.2.3-1ubuntu1vulnerable
Ubuntuphp7.2pro7.2.5-0ubuntu0.18.04.1vulnerable
Ubuntuphp7.2pro7.2.7-0ubuntu0.18.04.1vulnerable
Ubuntuphp7.2pro7.2.7-0ubuntu0.18.04.2vulnerable
Ubuntuphp7.2pro7.2.10-0ubuntu0.18.04.1vulnerable
Ubuntuphp7.2pro7.2.15-0ubuntu0.18.04.1vulnerable
Ubuntuphp7.2pro7.2.15-0ubuntu0.18.04.2vulnerable
Ubuntuphp7.2pro7.2.17-0ubuntu0.18.04.1vulnerable
Ubuntuphp7.2pro7.2.19-0ubuntu0.18.04.1vulnerable
Ubuntuphp7.2pro7.2.19-0ubuntu0.18.04.2vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.1vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.2vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.3vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.4vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.6vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.7vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.8vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.9vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.10vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.11vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.12vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.13vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.15vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.16vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.17vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.17+esm1vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.17+esm2vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.17+esm3vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.17+esm4vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.17+esm5vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.17+esm6vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.17+esm7vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.17+esm8vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.17+esm9vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.17+esm10vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.17+esm11vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.17+esm12vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.17+esm13vulnerable
Ubuntuphp7.2pro7.2.24-0ubuntu0.18.04.17+esm14vulnerable
Ubuntuphp7.4pro7.4.3-4build1vulnerable
Ubuntuphp7.4pro7.4.3-4build2vulnerable
Ubuntuphp7.4pro7.4.3-4ubuntu1vulnerable
Ubuntuphp7.4pro7.4.3-4ubuntu1.1vulnerable
Ubuntuphp7.4pro7.4.3-4ubuntu2.2vulnerable
Ubuntuphp7.4pro7.4.3-4ubuntu2.4vulnerable
Ubuntuphp7.4pro7.4.3-4ubuntu2.5vulnerable
Ubuntuphp7.4pro7.4.3-4ubuntu2.6vulnerable
Ubuntuphp7.4pro7.4.3-4ubuntu2.7vulnerable
Ubuntuphp7.4pro7.4.3-4ubuntu2.8vulnerable
Ubuntuphp7.4pro7.4.3-4ubuntu2.9vulnerable
Ubuntuphp7.4pro7.4.3-4ubuntu2.10vulnerable
Ubuntuphp7.4pro7.4.3-4ubuntu2.11vulnerable
Ubuntuphp7.4pro7.4.3-4ubuntu2.12vulnerable
Ubuntuphp7.4pro7.4.3-4ubuntu2.13vulnerable
Ubuntuphp7.4pro7.4.3-4ubuntu2.15vulnerable
Ubuntuphp7.4pro7.4.3-4ubuntu2.16vulnerable
Ubuntuphp7.4pro7.4.3-4ubuntu2.17vulnerable
Ubuntuphp7.4pro7.4.3-4ubuntu2.18vulnerable
Ubuntuphp7.4pro7.4.3-4ubuntu2.19vulnerable
Ubuntuphp7.4pro7.4.3-4ubuntu2.20vulnerable
Ubuntuphp7.4pro7.4.3-4ubuntu2.22vulnerable
Ubuntuphp7.4pro7.4.3-4ubuntu2.23vulnerable
Ubuntuphp7.4pro7.4.3-4ubuntu2.24vulnerable
Ubuntuphp7.4pro7.4.3-4ubuntu2.26vulnerable
Ubuntuphp7.4pro7.4.3-4ubuntu2.28vulnerable
Ubuntuphp7.4pro7.4.3-4ubuntu2.29vulnerable
Ubuntuphp7.4pro7.4.3-4ubuntu2.29+esm1vulnerable
Ubuntuphp7.4pro7.4.3-4ubuntu2.29+esm2vulnerable
Ubuntuphp7.4pro7.4.3-4ubuntu2.29+esm3vulnerable
Ubuntuphp7.4pro7.4.3-4ubuntu2.29+esm4vulnerable
Ubuntuphp7.4pro7.4.3-4ubuntu2.29+esm5vulnerable
Ubuntuphp8.122.048.1.0~rc4-1ubuntu2vulnerable
Ubuntuphp8.122.048.1.0-1vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu1vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.1vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.2vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.3vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.4vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.5vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.6vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.8vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.9vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.10vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.11vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.13vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.14vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.15vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.17vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.18vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.19vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.20vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.21vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.22vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.23vulnerable
Ubuntuphp8.122.048.1.2-1ubuntu2.24fixed
Ubuntuphp8.324.048.3.0-1vulnerable
Ubuntuphp8.324.048.3.0-1ubuntu1vulnerable
Ubuntuphp8.324.048.3.4-1vulnerable
Ubuntuphp8.324.048.3.4-1build1vulnerable
Ubuntuphp8.324.048.3.6-0maysync1vulnerable
Ubuntuphp8.324.048.3.6-0ubuntu0.24.04.1vulnerable
Ubuntuphp8.324.048.3.6-0ubuntu0.24.04.2vulnerable
Ubuntuphp8.324.048.3.6-0ubuntu0.24.04.3vulnerable
Ubuntuphp8.324.048.3.6-0ubuntu0.24.04.4vulnerable
Ubuntuphp8.324.048.3.6-0ubuntu0.24.04.5vulnerable
Ubuntuphp8.324.048.3.6-0ubuntu0.24.04.6vulnerable
Ubuntuphp8.324.048.3.6-0ubuntu0.24.04.7vulnerable
Ubuntuphp8.324.048.3.6-0ubuntu0.24.04.8vulnerable
Ubuntuphp8.324.048.3.6-0ubuntu0.24.04.9fixed
Ubuntuphp8.425.108.4.5-1ubuntu1vulnerable
Ubuntuphp8.425.108.4.8-1ubuntu1vulnerable
Ubuntuphp8.425.108.4.11-1ubuntu1vulnerable
Ubuntuphp8.425.108.4.11-1ubuntu1.1vulnerable
Ubuntuphp8.425.108.4.11-1ubuntu1.2fixed
Ubuntuphp8.526.048.5.2-0ubuntu1vulnerable
Ubuntuphp8.526.048.5.4-0ubuntu1vulnerable
Ubuntuphp8.526.048.5.4-0ubuntu1.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianphp8.2sourcebookworm8.2.31-1~deb12u1not yet assignedNot reportedNot reported
Cpephp8.3cpeNot reported8.3.6-0ubuntu0.24.04.9Not reportedNot reportedNot reported
Cpelibapache2-mod-php8.3cpeNot reported8.3.6-0ubuntu0.24.04.9Not reportedNot reportedNot reported
Cpelibphp8.3-embedcpeNot reported8.3.6-0ubuntu0.24.04.9Not reportedNot reportedNot reported
Cpephp8.3-bcmathcpeNot reported8.3.6-0ubuntu0.24.04.9Not reportedNot reportedNot reported
Cpephp8.3-bz2cpeNot reported8.3.6-0ubuntu0.24.04.9Not reportedNot reportedNot reported
Cpephp8.3-cgicpeNot reported8.3.6-0ubuntu0.24.04.9Not reportedNot reportedNot reported
Cpephp8.3-clicpeNot reported8.3.6-0ubuntu0.24.04.9Not reportedNot reportedNot reported
Cpephp8.3-commoncpeNot reported8.3.6-0ubuntu0.24.04.9Not reportedNot reportedNot reported
Cpephp8.3-curlcpeNot reported8.3.6-0ubuntu0.24.04.9Not reportedNot reportedNot reported
Cpephp8.3-dbacpeNot reported8.3.6-0ubuntu0.24.04.9Not reportedNot reportedNot reported
Cpephp8.3-devcpeNot reported8.3.6-0ubuntu0.24.04.9Not reportedNot reportedNot reported
Cpephp8.3-enchantcpeNot reported8.3.6-0ubuntu0.24.04.9Not reportedNot reportedNot reported
Cpephp8.3-fpmcpeNot reported8.3.6-0ubuntu0.24.04.9Not reportedNot reportedNot reported
Cpephp8.3-gdcpeNot reported8.3.6-0ubuntu0.24.04.9Not reportedNot reportedNot reported
Cpephp8.3-gmpcpeNot reported8.3.6-0ubuntu0.24.04.9Not reportedNot reportedNot reported
Cpephp8.3-imapcpeNot reported8.3.6-0ubuntu0.24.04.9Not reportedNot reportedNot reported
Cpephp8.3-interbasecpeNot reported8.3.6-0ubuntu0.24.04.9Not reportedNot reportedNot reported
Cpephp8.3-intlcpeNot reported8.3.6-0ubuntu0.24.04.9Not reportedNot reportedNot reported
Cpephp8.3-ldapcpeNot reported8.3.6-0ubuntu0.24.04.9Not reportedNot reportedNot reported
Cpephp8.3-mbstringcpeNot reported8.3.6-0ubuntu0.24.04.9Not reportedNot reportedNot reported
Cpephp8.3-mysqlcpeNot reported8.3.6-0ubuntu0.24.04.9Not reportedNot reportedNot reported
Cpephp8.3-odbccpeNot reported8.3.6-0ubuntu0.24.04.9Not reportedNot reportedNot reported
Cpephp8.3-opcachecpeNot reported8.3.6-0ubuntu0.24.04.9Not reportedNot reportedNot reported
Cpephp8.3-pgsqlcpeNot reported8.3.6-0ubuntu0.24.04.9Not reportedNot reportedNot reported
Cpephp8.3-phpdbgcpeNot reported8.3.6-0ubuntu0.24.04.9Not reportedNot reportedNot reported
Cpephp8.3-pspellcpeNot reported8.3.6-0ubuntu0.24.04.9Not reportedNot reportedNot reported
Cpephp8.3-readlinecpeNot reported8.3.6-0ubuntu0.24.04.9Not reportedNot reportedNot reported
Cpephp8.3-snmpcpeNot reported8.3.6-0ubuntu0.24.04.9Not reportedNot reportedNot reported
Cpephp8.3-soapcpeNot reported8.3.6-0ubuntu0.24.04.9Not reportedNot reportedNot reported
Cpephp8.3-sqlite3cpeNot reported8.3.6-0ubuntu0.24.04.9Not reportedNot reportedNot reported
Cpephp8.3-sybasecpeNot reported8.3.6-0ubuntu0.24.04.9Not reportedNot reportedNot reported
Cpephp8.3-tidycpeNot reported8.3.6-0ubuntu0.24.04.9Not reportedNot reportedNot reported
Cpephp8.3-xmlcpeNot reported8.3.6-0ubuntu0.24.04.9Not reportedNot reportedNot reported
Cpephp8.3-xslcpeNot reported8.3.6-0ubuntu0.24.04.9Not reportedNot reportedNot reported
Cpephp8.3-zipcpeNot reported8.3.6-0ubuntu0.24.04.9Not reportedNot reportedNot reported
CpephpcpeNot reported8.2.31Not reportedNot reportedNot reported
CpephpcpeNot reported8.3.31Not reportedNot reportedNot reported
CpephpcpeNot reported8.4.21Not reportedNot reportedNot reported
CpephpcpeNot reported8.5.6Not reportedNot reportedNot reported
Ubuntuphp8.1deb22.048.1.2-1ubuntu2.24Not reportedUBUNTU-CVE-2026-6735Not reported
Ubuntuphp8.3deb24.048.3.6-0ubuntu0.24.04.9Not reportedUBUNTU-CVE-2026-6735Not reported
Ubuntuphp8.4deb25.108.4.11-1ubuntu1.2Not reportedUBUNTU-CVE-2026-6735Not reported
Ubuntuphp8.5deb26.048.5.4-0ubuntu1.1Not reportedUBUNTU-CVE-2026-6735Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • Source package: [php8.2]

    Details (4)
    • 8.2.32-1~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

    • 8.2.32-1~deb12u1 · arm64 · bookworm

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

    • 8.2.33-1~deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

    • 8.2.33-1~deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

  • Source package: [php8.2]

    Details (4)
    • 8.2.32-1~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

    • 8.2.32-1~deb12u1 · arm64 · bookworm

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

    • 8.2.33-1~deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

    • 8.2.33-1~deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

  • [php8.2]Fixed
    Details (4)
    • 8.2.32-1~deb12u1 · all · bookworm

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

    • 8.2.32-1~deb12u1 · all · bookworm

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

    • 8.2.33-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

    • 8.2.33-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

  • Source package: [php8.2]

    Details (4)
    • 8.2.32-1~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

    • 8.2.32-1~deb12u1 · arm64 · bookworm

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

    • 8.2.33-1~deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

    • 8.2.33-1~deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

  • [php8.2-bz2]Fixed

    Source package: [php8.2]

    Details (4)
    • 8.2.32-1~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

    • 8.2.32-1~deb12u1 · arm64 · bookworm

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

    • 8.2.33-1~deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

    • 8.2.33-1~deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

  • [php8.2-cgi]Fixed

    Source package: [php8.2]

    Details (4)
    • 8.2.32-1~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

    • 8.2.32-1~deb12u1 · arm64 · bookworm

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

    • 8.2.33-1~deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

    • 8.2.33-1~deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

  • [php8.2-cli]Fixed

    Source package: [php8.2]

    Details (4)
    • 8.2.32-1~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

    • 8.2.32-1~deb12u1 · arm64 · bookworm

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

    • 8.2.33-1~deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

    • 8.2.33-1~deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

  • Source package: [php8.2]

    Details (4)
    • 8.2.32-1~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

    • 8.2.32-1~deb12u1 · arm64 · bookworm

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

    • 8.2.33-1~deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

    • 8.2.33-1~deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

  • Source package: [php8.2]

    Details (4)
    • 8.2.32-1~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

    • 8.2.32-1~deb12u1 · arm64 · bookworm

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

    • 8.2.33-1~deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

    • 8.2.33-1~deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

  • [php8.2-dba]Fixed

    Source package: [php8.2]

    Details (4)
    • 8.2.32-1~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

    • 8.2.32-1~deb12u1 · arm64 · bookworm

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

    • 8.2.33-1~deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

    • 8.2.33-1~deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

  • [php8.2-dev]Fixed

    Source package: [php8.2]

    Details (4)
    • 8.2.32-1~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

    • 8.2.32-1~deb12u1 · arm64 · bookworm

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

    • 8.2.33-1~deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

    • 8.2.33-1~deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

  • Source package: [php8.2]

    Details (4)
    • 8.2.32-1~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

    • 8.2.32-1~deb12u1 · arm64 · bookworm

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

    • 8.2.33-1~deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

    • 8.2.33-1~deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

  • [php8.2-fpm]Fixed

    Source package: [php8.2]

    Details (4)
    • 8.2.32-1~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

    • 8.2.32-1~deb12u1 · arm64 · bookworm

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

    • 8.2.33-1~deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

    • 8.2.33-1~deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

  • [php8.2-gd]Fixed

    Source package: [php8.2]

    Details (4)
    • 8.2.32-1~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

    • 8.2.32-1~deb12u1 · arm64 · bookworm

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

    • 8.2.33-1~deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

    • 8.2.33-1~deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

  • [php8.2-gmp]Fixed

    Source package: [php8.2]

    Details (4)
    • 8.2.32-1~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

    • 8.2.32-1~deb12u1 · arm64 · bookworm

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

    • 8.2.33-1~deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

    • 8.2.33-1~deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

  • Source package: [php8.2]

    Details (4)
    • 8.2.32-1~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

    • 8.2.32-1~deb12u1 · arm64 · bookworm

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

    • 8.2.33-1~deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

    • 8.2.33-1~deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

  • Source package: [php8.2]

    Details (4)
    • 8.2.32-1~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

    • 8.2.32-1~deb12u1 · arm64 · bookworm

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

    • 8.2.33-1~deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

    • 8.2.33-1~deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

  • Source package: [php8.2]

    Details (4)
    • 8.2.32-1~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

    • 8.2.32-1~deb12u1 · arm64 · bookworm

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

    • 8.2.33-1~deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

    • 8.2.33-1~deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

  • Source package: [php8.2]

    Details (4)
    • 8.2.32-1~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

    • 8.2.32-1~deb12u1 · arm64 · bookworm

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

    • 8.2.33-1~deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

    • 8.2.33-1~deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

  • Source package: [php8.2]

    Details (4)
    • 8.2.32-1~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

    • 8.2.32-1~deb12u1 · arm64 · bookworm

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

    • 8.2.33-1~deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

    • 8.2.33-1~deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 8.2.31-1~deb12u1

      nvd · php8.2 · debian · bookworm; nvd · php8.2 · debian · 12

Next results

Observed:

References