PHP Stale Internal Request-State Vulnerability

概要

参考情報

• php/php-src security advisory · Mitigation
• openwall.com/lists/oss-security/2026/10/21/16 · Mailing List
• openwall.com/lists/oss-security/2026/10/21/17 · Mailing List
• openwall.com/lists/oss-security/2026/10/21/23 · Mailing List
• openwall.com/lists/oss-security/2026/10/21/7 · Mailing List
• openwall.com/lists/oss-security/2026/10/22/14 · Mailing List
• openwall.com/lists/oss-security/2026/10/22/15 · Mailing List
• openwall.com/lists/oss-security/2026/10/22/16 · Mailing List
• openwall.com/lists/oss-security/2026/10/22/19 · Mailing List
• openwall.com/lists/oss-security/2026/10/22/2 · Mailing List
• openwall.com/lists/oss-security/2026/10/22/20 · Mailing List

関連ニュース

• CISA が PHP2Shell の悪用を確認、米政府機関に10月29日までの対応を指示 · 26/10/2026

php のその他の脆弱性

• CVE-2026-109618緊急 9.8悪用確認済み（CISA KEV）PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not prope…
• CVE-2026-92842中 5.9The convert.base64-encode, convert.quoted-printable-encode and convert.quoted-printable-decode stream filters accept a line-break-chars opti…
• CVE-2026-91768中 6.5The IPv6 branch of the FastCGI client access check compares only the first 12 bytes of a 16-byte IPv6 address, so listen.allowed_clients mat…
• CVE-2026-91769中 4.3PHP's OpenSSL stream peer verification checks the certificate's subjectAltName entries first and, whenever no entry matches, falls back to t…
• CVE-2026-91767中 6.5php_openssl_matches_wildcard_name() in ext/openssl/xp_ssl.c underflows the length argument passed to memchr() when a TLS server certificate …