CVE catalog

CVE-2026-91768

PHP vulnerabilities

Severity: High · CVSS 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published: Sep 23, 2026, 11:22:35 AM UTC
Source: [NVD] · [CVE record]
EPSS: 0.38% · Oct 25, 2026

The IPv6 branch of the FastCGI client access check compares only the first 12 bytes of a 16-byte IPv6 address, so listen.allowed_clients matches on a /96 prefix instead of the exact address. An attacker who can source an address sharing the first 96 bits with an allowed one passes the check and reaches the FastCGI endpoint.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	php8.2	bookworm	`8.2.32-1~deb12u1`	vulnerable
Debian	php8.2	bookworm-security	`8.2.35-1~deb12u1`	fixed
Ubuntu	php8.3	noble	`8.3.6-0ubuntu0.24.04.12`	fixed
Ubuntu	libapache2-mod-php8.3	noble	`8.3.6-0ubuntu0.24.04.12`	fixed
Ubuntu	libphp8.3-embed	noble	`8.3.6-0ubuntu0.24.04.12`	fixed
Ubuntu	php8.3-bcmath	noble	`8.3.6-0ubuntu0.24.04.12`	fixed
Ubuntu	php8.3-bz2	noble	`8.3.6-0ubuntu0.24.04.12`	fixed
Ubuntu	php8.3-cgi	noble	`8.3.6-0ubuntu0.24.04.12`	fixed
Ubuntu	php8.3-cli	noble	`8.3.6-0ubuntu0.24.04.12`	fixed
Ubuntu	php8.3-common	noble	`8.3.6-0ubuntu0.24.04.12`	fixed
Ubuntu	php8.3-curl	noble	`8.3.6-0ubuntu0.24.04.12`	fixed
Ubuntu	php8.3-dba	noble	`8.3.6-0ubuntu0.24.04.12`	fixed
Ubuntu	php8.3-dev	noble	`8.3.6-0ubuntu0.24.04.12`	fixed
Ubuntu	php8.3-enchant	noble	`8.3.6-0ubuntu0.24.04.12`	fixed
Ubuntu	php8.3-fpm	noble	`8.3.6-0ubuntu0.24.04.12`	fixed
Ubuntu	php8.3-gd	noble	`8.3.6-0ubuntu0.24.04.12`	fixed
Ubuntu	php8.3-gmp	noble	`8.3.6-0ubuntu0.24.04.12`	fixed
Ubuntu	php8.3-imap	noble	`8.3.6-0ubuntu0.24.04.12`	fixed
Ubuntu	php8.3-interbase	noble	`8.3.6-0ubuntu0.24.04.12`	fixed
Ubuntu	php8.3-intl	noble	`8.3.6-0ubuntu0.24.04.12`	fixed
Ubuntu	php8.3-ldap	noble	`8.3.6-0ubuntu0.24.04.12`	fixed
Ubuntu	php8.3-mbstring	noble	`8.3.6-0ubuntu0.24.04.12`	fixed
Ubuntu	php8.3-mysql	noble	`8.3.6-0ubuntu0.24.04.12`	fixed
Ubuntu	php8.3-odbc	noble	`8.3.6-0ubuntu0.24.04.12`	fixed
Ubuntu	php8.3-opcache	noble	`8.3.6-0ubuntu0.24.04.12`	fixed
Ubuntu	php8.3-pgsql	noble	`8.3.6-0ubuntu0.24.04.12`	fixed
Ubuntu	php8.3-phpdbg	noble	`8.3.6-0ubuntu0.24.04.12`	fixed
Ubuntu	php8.3-pspell	noble	`8.3.6-0ubuntu0.24.04.12`	fixed
Ubuntu	php8.3-readline	noble	`8.3.6-0ubuntu0.24.04.12`	fixed
Ubuntu	php8.3-snmp	noble	`8.3.6-0ubuntu0.24.04.12`	fixed
Ubuntu	php8.3-soap	noble	`8.3.6-0ubuntu0.24.04.12`	fixed
Ubuntu	php8.3-sqlite3	noble	`8.3.6-0ubuntu0.24.04.12`	fixed
Ubuntu	php8.3-sybase	noble	`8.3.6-0ubuntu0.24.04.12`	fixed
Ubuntu	php8.3-tidy	noble	`8.3.6-0ubuntu0.24.04.12`	fixed
Ubuntu	php8.3-xml	noble	`8.3.6-0ubuntu0.24.04.12`	fixed
Ubuntu	php8.3-xsl	noble	`8.3.6-0ubuntu0.24.04.12`	fixed
Ubuntu	php8.3-zip	noble	`8.3.6-0ubuntu0.24.04.12`	fixed
Ubuntu	php7.0	pro	`7.0.1-5`	vulnerable
Ubuntu	php7.0	pro	`7.0.1-6`	vulnerable
Ubuntu	php7.0	pro	`7.0.2-1`	vulnerable
Ubuntu	php7.0	pro	`7.0.2-3`	vulnerable
Ubuntu	php7.0	pro	`7.0.2-4`	vulnerable
Ubuntu	php7.0	pro	`7.0.2-5`	vulnerable
Ubuntu	php7.0	pro	`7.0.3-2`	vulnerable
Ubuntu	php7.0	pro	`7.0.3-3`	vulnerable
Ubuntu	php7.0	pro	`7.0.3-9ubuntu1`	vulnerable
Ubuntu	php7.0	pro	`7.0.4-5ubuntu1`	vulnerable
Ubuntu	php7.0	pro	`7.0.4-5ubuntu2`	vulnerable
Ubuntu	php7.0	pro	`7.0.4-7ubuntu1`	vulnerable
Ubuntu	php7.0	pro	`7.0.4-7ubuntu2`	vulnerable
Ubuntu	php7.0	pro	`7.0.4-7ubuntu2.1`	vulnerable
Ubuntu	php7.0	pro	`7.0.8-0ubuntu0.16.04.1`	vulnerable
Ubuntu	php7.0	pro	`7.0.8-0ubuntu0.16.04.2`	vulnerable
Ubuntu	php7.0	pro	`7.0.8-0ubuntu0.16.04.3`	vulnerable
Ubuntu	php7.0	pro	`7.0.13-0ubuntu0.16.04.1`	vulnerable
Ubuntu	php7.0	pro	`7.0.15-0ubuntu0.16.04.1`	vulnerable
Ubuntu	php7.0	pro	`7.0.15-0ubuntu0.16.04.2`	vulnerable
Ubuntu	php7.0	pro	`7.0.15-0ubuntu0.16.04.4`	vulnerable
Ubuntu	php7.0	pro	`7.0.18-0ubuntu0.16.04.1`	vulnerable
Ubuntu	php7.0	pro	`7.0.22-0ubuntu0.16.04.1`	vulnerable
Ubuntu	php7.0	pro	`7.0.25-0ubuntu0.16.04.1`	vulnerable
Ubuntu	php7.0	pro	`7.0.28-0ubuntu0.16.04.1`	vulnerable
Ubuntu	php7.0	pro	`7.0.30-0ubuntu0.16.04.1`	vulnerable
Ubuntu	php7.0	pro	`7.0.32-0ubuntu0.16.04.1`	vulnerable
Ubuntu	php7.0	pro	`7.0.33-0ubuntu0.16.04.1`	vulnerable
Ubuntu	php7.0	pro	`7.0.33-0ubuntu0.16.04.2`	vulnerable
Ubuntu	php7.0	pro	`7.0.33-0ubuntu0.16.04.3`	vulnerable
Ubuntu	php7.0	pro	`7.0.33-0ubuntu0.16.04.4`	vulnerable
Ubuntu	php7.0	pro	`7.0.33-0ubuntu0.16.04.5`	vulnerable
Ubuntu	php7.0	pro	`7.0.33-0ubuntu0.16.04.6`	vulnerable
Ubuntu	php7.0	pro	`7.0.33-0ubuntu0.16.04.7`	vulnerable
Ubuntu	php7.0	pro	`7.0.33-0ubuntu0.16.04.9`	vulnerable
Ubuntu	php7.0	pro	`7.0.33-0ubuntu0.16.04.11`	vulnerable
Ubuntu	php7.0	pro	`7.0.33-0ubuntu0.16.04.12`	vulnerable
Ubuntu	php7.0	pro	`7.0.33-0ubuntu0.16.04.14`	vulnerable
Ubuntu	php7.0	pro	`7.0.33-0ubuntu0.16.04.15`	vulnerable
Ubuntu	php7.0	pro	`7.0.33-0ubuntu0.16.04.16`	vulnerable
Ubuntu	php7.0	pro	`7.0.33-0ubuntu0.16.04.16+esm1`	vulnerable
Ubuntu	php7.0	pro	`7.0.33-0ubuntu0.16.04.16+esm2`	vulnerable
Ubuntu	php7.0	pro	`7.0.33-0ubuntu0.16.04.16+esm3`	vulnerable
Ubuntu	php7.0	pro	`7.0.33-0ubuntu0.16.04.16+esm4`	vulnerable
Ubuntu	php7.0	pro	`7.0.33-0ubuntu0.16.04.16+esm5`	vulnerable
Ubuntu	php7.0	pro	`7.0.33-0ubuntu0.16.04.16+esm6`	vulnerable
Ubuntu	php7.0	pro	`7.0.33-0ubuntu0.16.04.16+esm7`	vulnerable
Ubuntu	php7.0	pro	`7.0.33-0ubuntu0.16.04.16+esm8`	vulnerable
Ubuntu	php7.0	pro	`7.0.33-0ubuntu0.16.04.16+esm9`	vulnerable
Ubuntu	php7.0	pro	`7.0.33-0ubuntu0.16.04.16+esm10`	vulnerable
Ubuntu	php7.0	pro	`7.0.33-0ubuntu0.16.04.16+esm11`	vulnerable
Ubuntu	php7.0	pro	`7.0.33-0ubuntu0.16.04.16+esm12`	vulnerable
Ubuntu	php7.0	pro	`7.0.33-0ubuntu0.16.04.16+esm13`	vulnerable
Ubuntu	php7.0	pro	`7.0.33-0ubuntu0.16.04.16+esm14`	vulnerable
Ubuntu	php7.0	pro	`7.0.33-0ubuntu0.16.04.16+esm15`	vulnerable
Ubuntu	php7.0	pro	`7.0.33-0ubuntu0.16.04.16+esm16`	vulnerable
Ubuntu	php7.0	pro	`7.0.33-0ubuntu0.16.04.16+esm17`	vulnerable
Ubuntu	php7.0	pro	`7.0.33-0ubuntu0.16.04.16+esm18`	vulnerable
Ubuntu	php7.0	pro	`7.0.33-0ubuntu0.16.04.16+esm19`	vulnerable
Ubuntu	php7.0	pro	`7.0.33-0ubuntu0.16.04.16+esm20`	vulnerable
Ubuntu	php7.0	pro	`7.0.33-0ubuntu0.16.04.16+esm21`	fixed
Ubuntu	php7.2	pro	`7.2.1-1ubuntu2`	vulnerable
Ubuntu	php7.2	pro	`7.2.2-1ubuntu1`	vulnerable
Ubuntu	php7.2	pro	`7.2.2-1ubuntu2`	vulnerable
Ubuntu	php7.2	pro	`7.2.3-1ubuntu1`	vulnerable
Ubuntu	php7.2	pro	`7.2.5-0ubuntu0.18.04.1`	vulnerable
Ubuntu	php7.2	pro	`7.2.7-0ubuntu0.18.04.1`	vulnerable
Ubuntu	php7.2	pro	`7.2.7-0ubuntu0.18.04.2`	vulnerable
Ubuntu	php7.2	pro	`7.2.10-0ubuntu0.18.04.1`	vulnerable
Ubuntu	php7.2	pro	`7.2.15-0ubuntu0.18.04.1`	vulnerable
Ubuntu	php7.2	pro	`7.2.15-0ubuntu0.18.04.2`	vulnerable
Ubuntu	php7.2	pro	`7.2.17-0ubuntu0.18.04.1`	vulnerable
Ubuntu	php7.2	pro	`7.2.19-0ubuntu0.18.04.1`	vulnerable
Ubuntu	php7.2	pro	`7.2.19-0ubuntu0.18.04.2`	vulnerable
Ubuntu	php7.2	pro	`7.2.24-0ubuntu0.18.04.1`	vulnerable
Ubuntu	php7.2	pro	`7.2.24-0ubuntu0.18.04.2`	vulnerable
Ubuntu	php7.2	pro	`7.2.24-0ubuntu0.18.04.3`	vulnerable
Ubuntu	php7.2	pro	`7.2.24-0ubuntu0.18.04.4`	vulnerable
Ubuntu	php7.2	pro	`7.2.24-0ubuntu0.18.04.6`	vulnerable
Ubuntu	php7.2	pro	`7.2.24-0ubuntu0.18.04.7`	vulnerable
Ubuntu	php7.2	pro	`7.2.24-0ubuntu0.18.04.8`	vulnerable
Ubuntu	php7.2	pro	`7.2.24-0ubuntu0.18.04.9`	vulnerable
Ubuntu	php7.2	pro	`7.2.24-0ubuntu0.18.04.10`	vulnerable
Ubuntu	php7.2	pro	`7.2.24-0ubuntu0.18.04.11`	vulnerable
Ubuntu	php7.2	pro	`7.2.24-0ubuntu0.18.04.12`	vulnerable
Ubuntu	php7.2	pro	`7.2.24-0ubuntu0.18.04.13`	vulnerable
Ubuntu	php7.2	pro	`7.2.24-0ubuntu0.18.04.15`	vulnerable
Ubuntu	php7.2	pro	`7.2.24-0ubuntu0.18.04.16`	vulnerable
Ubuntu	php7.2	pro	`7.2.24-0ubuntu0.18.04.17`	vulnerable
Ubuntu	php7.2	pro	`7.2.24-0ubuntu0.18.04.17+esm1`	vulnerable
Ubuntu	php7.2	pro	`7.2.24-0ubuntu0.18.04.17+esm2`	vulnerable
Ubuntu	php7.2	pro	`7.2.24-0ubuntu0.18.04.17+esm3`	vulnerable
Ubuntu	php7.2	pro	`7.2.24-0ubuntu0.18.04.17+esm4`	vulnerable
Ubuntu	php7.2	pro	`7.2.24-0ubuntu0.18.04.17+esm5`	vulnerable
Ubuntu	php7.2	pro	`7.2.24-0ubuntu0.18.04.17+esm6`	vulnerable
Ubuntu	php7.2	pro	`7.2.24-0ubuntu0.18.04.17+esm7`	vulnerable
Ubuntu	php7.2	pro	`7.2.24-0ubuntu0.18.04.17+esm8`	vulnerable
Ubuntu	php7.2	pro	`7.2.24-0ubuntu0.18.04.17+esm9`	vulnerable
Ubuntu	php7.2	pro	`7.2.24-0ubuntu0.18.04.17+esm10`	vulnerable
Ubuntu	php7.2	pro	`7.2.24-0ubuntu0.18.04.17+esm11`	vulnerable
Ubuntu	php7.2	pro	`7.2.24-0ubuntu0.18.04.17+esm12`	vulnerable
Ubuntu	php7.2	pro	`7.2.24-0ubuntu0.18.04.17+esm13`	fixed
Ubuntu	php7.4	pro	`7.4.3-4build1`	vulnerable
Ubuntu	php7.4	pro	`7.4.3-4build2`	vulnerable
Ubuntu	php7.4	pro	`7.4.3-4ubuntu1`	vulnerable
Ubuntu	php7.4	pro	`7.4.3-4ubuntu1.1`	vulnerable
Ubuntu	php7.4	pro	`7.4.3-4ubuntu2.2`	vulnerable
Ubuntu	php7.4	pro	`7.4.3-4ubuntu2.4`	vulnerable
Ubuntu	php7.4	pro	`7.4.3-4ubuntu2.5`	vulnerable
Ubuntu	php7.4	pro	`7.4.3-4ubuntu2.6`	vulnerable
Ubuntu	php7.4	pro	`7.4.3-4ubuntu2.7`	vulnerable
Ubuntu	php7.4	pro	`7.4.3-4ubuntu2.8`	vulnerable
Ubuntu	php7.4	pro	`7.4.3-4ubuntu2.9`	vulnerable
Ubuntu	php7.4	pro	`7.4.3-4ubuntu2.10`	vulnerable
Ubuntu	php7.4	pro	`7.4.3-4ubuntu2.11`	vulnerable
Ubuntu	php7.4	pro	`7.4.3-4ubuntu2.12`	vulnerable
Ubuntu	php7.4	pro	`7.4.3-4ubuntu2.13`	vulnerable
Ubuntu	php7.4	pro	`7.4.3-4ubuntu2.15`	vulnerable
Ubuntu	php7.4	pro	`7.4.3-4ubuntu2.16`	vulnerable
Ubuntu	php7.4	pro	`7.4.3-4ubuntu2.17`	vulnerable
Ubuntu	php7.4	pro	`7.4.3-4ubuntu2.18`	vulnerable
Ubuntu	php7.4	pro	`7.4.3-4ubuntu2.19`	vulnerable
Ubuntu	php7.4	pro	`7.4.3-4ubuntu2.20`	vulnerable
Ubuntu	php7.4	pro	`7.4.3-4ubuntu2.22`	vulnerable
Ubuntu	php7.4	pro	`7.4.3-4ubuntu2.23`	vulnerable
Ubuntu	php7.4	pro	`7.4.3-4ubuntu2.24`	vulnerable
Ubuntu	php7.4	pro	`7.4.3-4ubuntu2.26`	vulnerable
Ubuntu	php7.4	pro	`7.4.3-4ubuntu2.28`	vulnerable
Ubuntu	php7.4	pro	`7.4.3-4ubuntu2.29`	vulnerable
Ubuntu	php7.4	pro	`7.4.3-4ubuntu2.29+esm1`	vulnerable
Ubuntu	php7.4	pro	`7.4.3-4ubuntu2.29+esm2`	vulnerable
Ubuntu	php7.4	pro	`7.4.3-4ubuntu2.29+esm3`	vulnerable
Ubuntu	php7.4	pro	`7.4.3-4ubuntu2.29+esm4`	fixed
Ubuntu	php8.1	22.04	`8.1.0~rc4-1ubuntu2`	vulnerable
Ubuntu	php8.1	22.04	`8.1.0-1`	vulnerable
Ubuntu	php8.1	22.04	`8.1.2-1ubuntu1`	vulnerable
Ubuntu	php8.1	22.04	`8.1.2-1ubuntu2`	vulnerable
Ubuntu	php8.1	22.04	`8.1.2-1ubuntu2.1`	vulnerable
Ubuntu	php8.1	22.04	`8.1.2-1ubuntu2.2`	vulnerable
Ubuntu	php8.1	22.04	`8.1.2-1ubuntu2.3`	vulnerable
Ubuntu	php8.1	22.04	`8.1.2-1ubuntu2.4`	vulnerable
Ubuntu	php8.1	22.04	`8.1.2-1ubuntu2.5`	vulnerable
Ubuntu	php8.1	22.04	`8.1.2-1ubuntu2.6`	vulnerable
Ubuntu	php8.1	22.04	`8.1.2-1ubuntu2.8`	vulnerable
Ubuntu	php8.1	22.04	`8.1.2-1ubuntu2.9`	vulnerable
Ubuntu	php8.1	22.04	`8.1.2-1ubuntu2.10`	vulnerable
Ubuntu	php8.1	22.04	`8.1.2-1ubuntu2.11`	vulnerable
Ubuntu	php8.1	22.04	`8.1.2-1ubuntu2.13`	vulnerable
Ubuntu	php8.1	22.04	`8.1.2-1ubuntu2.14`	vulnerable
Ubuntu	php8.1	22.04	`8.1.2-1ubuntu2.15`	vulnerable
Ubuntu	php8.1	22.04	`8.1.2-1ubuntu2.17`	vulnerable
Ubuntu	php8.1	22.04	`8.1.2-1ubuntu2.18`	vulnerable
Ubuntu	php8.1	22.04	`8.1.2-1ubuntu2.19`	vulnerable
Ubuntu	php8.1	22.04	`8.1.2-1ubuntu2.20`	vulnerable
Ubuntu	php8.1	22.04	`8.1.2-1ubuntu2.21`	vulnerable
Ubuntu	php8.1	22.04	`8.1.2-1ubuntu2.22`	vulnerable
Ubuntu	php8.1	22.04	`8.1.2-1ubuntu2.23`	vulnerable
Ubuntu	php8.1	22.04	`8.1.2-1ubuntu2.24`	vulnerable
Ubuntu	php8.1	22.04	`8.1.2-1ubuntu2.25`	vulnerable
Ubuntu	php8.1	22.04	`8.1.2-1ubuntu2.26`	vulnerable
Ubuntu	php8.1	22.04	`8.1.2-1ubuntu2.27`	fixed
Ubuntu	php8.3	24.04	`8.3.0-1`	vulnerable
Ubuntu	php8.3	24.04	`8.3.0-1ubuntu1`	vulnerable
Ubuntu	php8.3	24.04	`8.3.4-1`	vulnerable
Ubuntu	php8.3	24.04	`8.3.4-1build1`	vulnerable
Ubuntu	php8.3	24.04	`8.3.6-0maysync1`	vulnerable
Ubuntu	php8.3	24.04	`8.3.6-0ubuntu0.24.04.1`	vulnerable
Ubuntu	php8.3	24.04	`8.3.6-0ubuntu0.24.04.2`	vulnerable
Ubuntu	php8.3	24.04	`8.3.6-0ubuntu0.24.04.3`	vulnerable
Ubuntu	php8.3	24.04	`8.3.6-0ubuntu0.24.04.4`	vulnerable
Ubuntu	php8.3	24.04	`8.3.6-0ubuntu0.24.04.5`	vulnerable
Ubuntu	php8.3	24.04	`8.3.6-0ubuntu0.24.04.6`	vulnerable
Ubuntu	php8.3	24.04	`8.3.6-0ubuntu0.24.04.7`	vulnerable
Ubuntu	php8.3	24.04	`8.3.6-0ubuntu0.24.04.8`	vulnerable
Ubuntu	php8.3	24.04	`8.3.6-0ubuntu0.24.04.9`	vulnerable
Ubuntu	php8.3	24.04	`8.3.6-0ubuntu0.24.04.10`	vulnerable
Ubuntu	php8.3	24.04	`8.3.6-0ubuntu0.24.04.11`	vulnerable
Ubuntu	php8.3	24.04	`8.3.6-0ubuntu0.24.04.12`	fixed
Ubuntu	php8.5	26.10	`8.5.4-0ubuntu1`	vulnerable
Ubuntu	php8.5	26.10	`8.5.4-0ubuntu3`	vulnerable
Ubuntu	php8.5	26.10	`8.5.9-0ubuntu1`	vulnerable
Ubuntu	php8.5	26.10	`8.5.9-0ubuntu2`	fixed
Ubuntu	php8.5	26.04	`8.5.2-0ubuntu1`	vulnerable
Ubuntu	php8.5	26.04	`8.5.4-0ubuntu1`	vulnerable
Ubuntu	php8.5	26.04	`8.5.4-0ubuntu1.1`	vulnerable
Ubuntu	php8.5	26.04	`8.5.4-0ubuntu1.2`	vulnerable
Ubuntu	php8.5	26.04	`8.5.4-0ubuntu1.3`	vulnerable
Ubuntu	php8.5	26.04	`8.5.4-0ubuntu1.4`	fixed
Cpe	php	Not reported	`8.5.11`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	php8.2	source	bookworm	`8.2.34-1~deb12u1`	not yet assigned	Not reported	Not reported
Ubuntu	php8.3	deb	noble	`8.3.6-0ubuntu0.24.04.12`	Not reported	Not reported	Not reported
Ubuntu	libapache2-mod-php8.3	deb	noble	`8.3.6-0ubuntu0.24.04.12`	Not reported	Not reported	Not reported
Ubuntu	libphp8.3-embed	deb	noble	`8.3.6-0ubuntu0.24.04.12`	Not reported	Not reported	Not reported
Ubuntu	php8.3-bcmath	deb	noble	`8.3.6-0ubuntu0.24.04.12`	Not reported	Not reported	Not reported
Ubuntu	php8.3-bz2	deb	noble	`8.3.6-0ubuntu0.24.04.12`	Not reported	Not reported	Not reported
Ubuntu	php8.3-cgi	deb	noble	`8.3.6-0ubuntu0.24.04.12`	Not reported	Not reported	Not reported
Ubuntu	php8.3-cli	deb	noble	`8.3.6-0ubuntu0.24.04.12`	Not reported	Not reported	Not reported
Ubuntu	php8.3-common	deb	noble	`8.3.6-0ubuntu0.24.04.12`	Not reported	Not reported	Not reported
Ubuntu	php8.3-curl	deb	noble	`8.3.6-0ubuntu0.24.04.12`	Not reported	Not reported	Not reported
Ubuntu	php8.3-dba	deb	noble	`8.3.6-0ubuntu0.24.04.12`	Not reported	Not reported	Not reported
Ubuntu	php8.3-dev	deb	noble	`8.3.6-0ubuntu0.24.04.12`	Not reported	Not reported	Not reported
Ubuntu	php8.3-enchant	deb	noble	`8.3.6-0ubuntu0.24.04.12`	Not reported	Not reported	Not reported
Ubuntu	php8.3-fpm	deb	noble	`8.3.6-0ubuntu0.24.04.12`	Not reported	Not reported	Not reported
Ubuntu	php8.3-gd	deb	noble	`8.3.6-0ubuntu0.24.04.12`	Not reported	Not reported	Not reported
Ubuntu	php8.3-gmp	deb	noble	`8.3.6-0ubuntu0.24.04.12`	Not reported	Not reported	Not reported
Ubuntu	php8.3-imap	deb	noble	`8.3.6-0ubuntu0.24.04.12`	Not reported	Not reported	Not reported
Ubuntu	php8.3-interbase	deb	noble	`8.3.6-0ubuntu0.24.04.12`	Not reported	Not reported	Not reported
Ubuntu	php8.3-intl	deb	noble	`8.3.6-0ubuntu0.24.04.12`	Not reported	Not reported	Not reported
Ubuntu	php8.3-ldap	deb	noble	`8.3.6-0ubuntu0.24.04.12`	Not reported	Not reported	Not reported
Ubuntu	php8.3-mbstring	deb	noble	`8.3.6-0ubuntu0.24.04.12`	Not reported	Not reported	Not reported
Ubuntu	php8.3-mysql	deb	noble	`8.3.6-0ubuntu0.24.04.12`	Not reported	Not reported	Not reported
Ubuntu	php8.3-odbc	deb	noble	`8.3.6-0ubuntu0.24.04.12`	Not reported	Not reported	Not reported
Ubuntu	php8.3-opcache	deb	noble	`8.3.6-0ubuntu0.24.04.12`	Not reported	Not reported	Not reported
Ubuntu	php8.3-pgsql	deb	noble	`8.3.6-0ubuntu0.24.04.12`	Not reported	Not reported	Not reported
Ubuntu	php8.3-phpdbg	deb	noble	`8.3.6-0ubuntu0.24.04.12`	Not reported	Not reported	Not reported
Ubuntu	php8.3-pspell	deb	noble	`8.3.6-0ubuntu0.24.04.12`	Not reported	Not reported	Not reported
Ubuntu	php8.3-readline	deb	noble	`8.3.6-0ubuntu0.24.04.12`	Not reported	Not reported	Not reported
Ubuntu	php8.3-snmp	deb	noble	`8.3.6-0ubuntu0.24.04.12`	Not reported	Not reported	Not reported
Ubuntu	php8.3-soap	deb	noble	`8.3.6-0ubuntu0.24.04.12`	Not reported	Not reported	Not reported
Ubuntu	php8.3-sqlite3	deb	noble	`8.3.6-0ubuntu0.24.04.12`	Not reported	Not reported	Not reported
Ubuntu	php8.3-sybase	deb	noble	`8.3.6-0ubuntu0.24.04.12`	Not reported	Not reported	Not reported
Ubuntu	php8.3-tidy	deb	noble	`8.3.6-0ubuntu0.24.04.12`	Not reported	Not reported	Not reported
Ubuntu	php8.3-xml	deb	noble	`8.3.6-0ubuntu0.24.04.12`	Not reported	Not reported	Not reported
Ubuntu	php8.3-xsl	deb	noble	`8.3.6-0ubuntu0.24.04.12`	Not reported	Not reported	Not reported
Ubuntu	php8.3-zip	deb	noble	`8.3.6-0ubuntu0.24.04.12`	Not reported	Not reported	Not reported
Ubuntu	php7.0	deb	pro	`7.0.33-0ubuntu0.16.04.16+esm21`	Not reported	UBUNTU-CVE-2026-91768	Not reported
Ubuntu	php7.2	deb	pro	`7.2.24-0ubuntu0.18.04.17+esm13`	Not reported	UBUNTU-CVE-2026-91768	Not reported
Ubuntu	php7.4	deb	pro	`7.4.3-4ubuntu2.29+esm4`	Not reported	UBUNTU-CVE-2026-91768	Not reported
Ubuntu	php8.1	deb	22.04	`8.1.2-1ubuntu2.27`	Not reported	UBUNTU-CVE-2026-91768	Not reported
Ubuntu	php8.3	deb	24.04	`8.3.6-0ubuntu0.24.04.12`	Not reported	UBUNTU-CVE-2026-91768	Not reported
Ubuntu	php8.5	deb	26.10	`8.5.9-0ubuntu2`	Not reported	UBUNTU-CVE-2026-91768	Not reported
Ubuntu	php8.5	deb	26.04	`8.5.4-0ubuntu1.4`	Not reported	UBUNTU-CVE-2026-91768	Not reported
Cpe	php	cpe	Not reported	`8.5.11`	Not reported	NVD-CVE-2026-91768	Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[libapache2-mod-php8.2]Affected
Source package: [php8.2]
Details (4)
- 8.2.32-1~deb12u1 · amd64 · bookworm
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.32-1~deb12u1 · arm64 · bookworm
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · amd64 · bookworm-security
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · arm64 · bookworm-security
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
[libphp8.2-embed]Affected
Source package: [php8.2]
Details (4)
- 8.2.32-1~deb12u1 · amd64 · bookworm
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.32-1~deb12u1 · arm64 · bookworm
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · amd64 · bookworm-security
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · arm64 · bookworm-security
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
[php8.2]Affected
Details (4)
- 8.2.32-1~deb12u1 · all · bookworm
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.32-1~deb12u1 · all · bookworm
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · all · bookworm-security
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · all · bookworm-security
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
[php8.2-bcmath]Affected
Source package: [php8.2]
Details (4)
- 8.2.32-1~deb12u1 · amd64 · bookworm
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.32-1~deb12u1 · arm64 · bookworm
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · amd64 · bookworm-security
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · arm64 · bookworm-security
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
[php8.2-bz2]Affected
Source package: [php8.2]
Details (4)
- 8.2.32-1~deb12u1 · amd64 · bookworm
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.32-1~deb12u1 · arm64 · bookworm
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · amd64 · bookworm-security
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · arm64 · bookworm-security
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
[php8.2-cgi]Affected
Source package: [php8.2]
Details (4)
- 8.2.32-1~deb12u1 · amd64 · bookworm
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.32-1~deb12u1 · arm64 · bookworm
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · amd64 · bookworm-security
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · arm64 · bookworm-security
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
[php8.2-cli]Affected
Source package: [php8.2]
Details (4)
- 8.2.32-1~deb12u1 · amd64 · bookworm
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.32-1~deb12u1 · arm64 · bookworm
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · amd64 · bookworm-security
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · arm64 · bookworm-security
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
[php8.2-common]Affected
Source package: [php8.2]
Details (4)
- 8.2.32-1~deb12u1 · amd64 · bookworm
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.32-1~deb12u1 · arm64 · bookworm
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · amd64 · bookworm-security
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · arm64 · bookworm-security
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
[php8.2-curl]Affected
Source package: [php8.2]
Details (4)
- 8.2.32-1~deb12u1 · amd64 · bookworm
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.32-1~deb12u1 · arm64 · bookworm
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · amd64 · bookworm-security
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · arm64 · bookworm-security
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
[php8.2-dba]Affected
Source package: [php8.2]
Details (4)
- 8.2.32-1~deb12u1 · amd64 · bookworm
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.32-1~deb12u1 · arm64 · bookworm
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · amd64 · bookworm-security
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · arm64 · bookworm-security
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
[php8.2-dev]Affected
Source package: [php8.2]
Details (4)
- 8.2.32-1~deb12u1 · amd64 · bookworm
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.32-1~deb12u1 · arm64 · bookworm
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · amd64 · bookworm-security
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · arm64 · bookworm-security
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
[php8.2-enchant]Affected
Source package: [php8.2]
Details (4)
- 8.2.32-1~deb12u1 · amd64 · bookworm
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.32-1~deb12u1 · arm64 · bookworm
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · amd64 · bookworm-security
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · arm64 · bookworm-security
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
[php8.2-fpm]Affected
Source package: [php8.2]
Details (4)
- 8.2.32-1~deb12u1 · amd64 · bookworm
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.32-1~deb12u1 · arm64 · bookworm
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · amd64 · bookworm-security
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · arm64 · bookworm-security
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
[php8.2-gd]Affected
Source package: [php8.2]
Details (4)
- 8.2.32-1~deb12u1 · amd64 · bookworm
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.32-1~deb12u1 · arm64 · bookworm
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · amd64 · bookworm-security
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · arm64 · bookworm-security
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
[php8.2-gmp]Affected
Source package: [php8.2]
Details (4)
- 8.2.32-1~deb12u1 · amd64 · bookworm
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.32-1~deb12u1 · arm64 · bookworm
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · amd64 · bookworm-security
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · arm64 · bookworm-security
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
[php8.2-imap]Affected
Source package: [php8.2]
Details (4)
- 8.2.32-1~deb12u1 · amd64 · bookworm
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.32-1~deb12u1 · arm64 · bookworm
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · amd64 · bookworm-security
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · arm64 · bookworm-security
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
[php8.2-interbase]Affected
Source package: [php8.2]
Details (4)
- 8.2.32-1~deb12u1 · amd64 · bookworm
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.32-1~deb12u1 · arm64 · bookworm
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · amd64 · bookworm-security
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · arm64 · bookworm-security
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
[php8.2-intl]Affected
Source package: [php8.2]
Details (4)
- 8.2.32-1~deb12u1 · amd64 · bookworm
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.32-1~deb12u1 · arm64 · bookworm
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · amd64 · bookworm-security
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · arm64 · bookworm-security
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
[php8.2-ldap]Affected
Source package: [php8.2]
Details (4)
- 8.2.32-1~deb12u1 · amd64 · bookworm
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.32-1~deb12u1 · arm64 · bookworm
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · amd64 · bookworm-security
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · arm64 · bookworm-security
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
[php8.2-mbstring]Affected
Source package: [php8.2]
Details (4)
- 8.2.32-1~deb12u1 · amd64 · bookworm
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.32-1~deb12u1 · arm64 · bookworm
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · amd64 · bookworm-security
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12
- 8.2.33-1~deb12u1 · arm64 · bookworm-security
  Affected · Fixed: 8.2.34-1~deb12u1
  usn · php8.2 · debian · bookworm; usn · php8.2 · debian · 12

Next results

Observed: Oct 27, 2026, 3:58:34 PM UTC

References

[Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]