Vulnerabilities in PHP Group
88 resultsCVE-2025-14178MEDIUMHeap buffer overflow in array_merge()EPSS 0.4%CVE-2026-7258MEDIUMOut-of-bounds read in urldecode() on NetBSDEPSS 0.3%CVE-2026-7261MEDIUMSoapServer session-persisted object use-after-free via SOAP header faultEPSS 0.3%CVE-2026-7263MEDIUMDoS attack via DOMNode::C14N()EPSS 0.3%CVE-2025-14179HIGHSQL injection in pdo_firebird via NUL bytes in quoted stringsEPSS 0.3%CVE-2026-7568MEDIUMSigned integer overflow in metaphone()EPSS 0.2%CVE-2026-6735HIGHXSS within PHP-FPM status endpointEPSS 0.2%CVE-2026-7259LOWNull pointer dereference in php_mb_check_encoding() via mb_ereg_search_init()EPSS 0.2%