CVE-2026-109619高 8.1悪用確認済み（CISA KEV）PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may…
CVE-2026-109618緊急 9.8悪用確認済み（CISA KEV）PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not prope…
CVE-2026-92842中 5.9The convert.base64-encode, convert.quoted-printable-encode and convert.quoted-printable-decode stream filters accept a line-break-chars opti…
CVE-2026-91768中 6.5The IPv6 branch of the FastCGI client access check compares only the first 12 bytes of a 16-byte IPv6 address, so listen.allowed_clients mat…
CVE-2026-91769中 4.3PHP's OpenSSL stream peer verification checks the certificate's subjectAltName entries first and, whenever no entry matches, falls back to t…