Read the docs
TI-2026-78793 Aliases CVE-2026-109618

Out-of-memory handling flaw in PHP allows remote code execution

Priority CRITICAL 99Exploited in the wildCWE-1325Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
High
Attack requirements
Present
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Partial Red Hat: 15 fixed, 2 without a fix

Attack profile from CVSS 4.0 · CNA. Fix status from CNA and Red Hat. Impact type from CWE-416 and the CVSS impact.

Summary

PHP 8.2.* before 8.2.35, 8.3.* before 8.3.36, 8.4.* before 8.4.27 and 8.5.* before 8.5.12 is affected. Some contexts leave request memory uninitialized after an out-of-memory error aborts the request, and later cleanup reads that memory (CWE-824). A remote unauthenticated attacker can trigger this condition, which can lead to remote code execution. CISA lists the flaw in its Known Exploited Vulnerabilities catalog, with date added 2026-10-26.

Written with Claude Haiku 5.5 from the sources below · 2026-10-30

Description from the CNA

PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).

Why it matters now

Exploitation Active In CISA KEV since 2026-10-26CISA due date 2026-10-29
EPSS 0.99999 99th percentileScored 2026-11-07
Fix Partial PHP (PHP Group): 8.2.35, 8.3.36, 8.4.27 +1Red Hat: 19 advisoriesRed Hat: 15 fixed, 2 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Active
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
PHP GroupPHPbefore 8.2.35; before 8.3.36; before 8.4.27; before 8.5.128.2.35, 8.3.36, 8.4.27, 8.5.12Patch availableCNA
  • PHP VendorPHP Group Affected before 8.2.35; before 8.3.36; before 8.4.27; before 8.5.12 Fixed in 8.2.35, 8.3.36, 8.4.27, 8.5.12 Patch available CNA

CPE configurations NVD · 312

CPEVersionsRoleVendor
cpe:2.3:a:php:php:*:*:*:*:*:*:*:*7.3.0 to before 8.2.35; 8.3.0 to before 8.3.36; 8.4.0 to before 8.4.27; 8.5.0 to before 8.5.12VulnerablePHP
cpe:2.3:o:siemens:ruggedcom_ape1808_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSiemens
cpe:2.3:h:siemens:ruggedcom_ape1808:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*10.2.0 to before 10.2.7VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:-:*:*:*:*:*:*10.2.7VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h1:*:*:*:*:*:*10.2.7 h1VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h10:*:*:*:*:*:*10.2.7 h10VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h11:*:*:*:*:*:*10.2.7 h11VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h12:*:*:*:*:*:*10.2.7 h12VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h13:*:*:*:*:*:*10.2.7 h13VulnerableCyberArk Software, a Palo Alto Networks Company
Show 302 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h14:*:*:*:*:*:*10.2.7 h14VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h15:*:*:*:*:*:*10.2.7 h15VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h16:*:*:*:*:*:*10.2.7 h16VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h17:*:*:*:*:*:*10.2.7 h17VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h18:*:*:*:*:*:*10.2.7 h18VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h19:*:*:*:*:*:*10.2.7 h19VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h2:*:*:*:*:*:*10.2.7 h2VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h20:*:*:*:*:*:*10.2.7 h20VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h21:*:*:*:*:*:*10.2.7 h21VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h22:*:*:*:*:*:*10.2.7 h22VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h23:*:*:*:*:*:*10.2.7 h23VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h24:*:*:*:*:*:*10.2.7 h24VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h3:*:*:*:*:*:*10.2.7 h3VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h32:*:*:*:*:*:*10.2.7 h32VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h34:*:*:*:*:*:*10.2.7 h34VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h35:*:*:*:*:*:*10.2.7 h35VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h36:*:*:*:*:*:*10.2.7 h36VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h37:*:*:*:*:*:*10.2.7 h37VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h38:*:*:*:*:*:*10.2.7 h38VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h4:*:*:*:*:*:*10.2.7 h4VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h5:*:*:*:*:*:*10.2.7 h5VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h6:*:*:*:*:*:*10.2.7 h6VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h7:*:*:*:*:*:*10.2.7 h7VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h8:*:*:*:*:*:*10.2.7 h8VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h9:*:*:*:*:*:*10.2.7 h9VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.8:*:*:*:*:*:*:*10.2.8VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.9:*:*:*:*:*:*:*10.2.9VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:-:*:*:*:*:*:*10.2.10VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h1:*:*:*:*:*:*10.2.10 h1VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h10:*:*:*:*:*:*10.2.10 h10VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h11:*:*:*:*:*:*10.2.10 h11VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h12:*:*:*:*:*:*10.2.10 h12VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h13:*:*:*:*:*:*10.2.10 h13VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h14:*:*:*:*:*:*10.2.10 h14VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h17:*:*:*:*:*:*10.2.10 h17VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h18:*:*:*:*:*:*10.2.10 h18VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h2:*:*:*:*:*:*10.2.10 h2VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h21:*:*:*:*:*:*10.2.10 h21VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h27:*:*:*:*:*:*10.2.10 h27VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h3:*:*:*:*:*:*10.2.10 h3VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h30:*:*:*:*:*:*10.2.10 h30VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h31:*:*:*:*:*:*10.2.10 h31VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h36:*:*:*:*:*:*10.2.10 h36VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h37:*:*:*:*:*:*10.2.10 h37VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h39:*:*:*:*:*:*10.2.10 h39VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h4:*:*:*:*:*:*10.2.10 h4VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h40:*:*:*:*:*:*10.2.10 h40VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h41:*:*:*:*:*:*10.2.10 h41VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h5:*:*:*:*:*:*10.2.10 h5VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h6:*:*:*:*:*:*10.2.10 h6VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h7:*:*:*:*:*:*10.2.10 h7VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h8:*:*:*:*:*:*10.2.10 h8VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h9:*:*:*:*:*:*10.2.10 h9VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.11:*:*:*:*:*:*:*10.2.11VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.12:*:*:*:*:*:*:*10.2.12VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:-:*:*:*:*:*:*10.2.13VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h1:*:*:*:*:*:*10.2.13 h1VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h10:*:*:*:*:*:*10.2.13 h10VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h15:*:*:*:*:*:*10.2.13 h15VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h16:*:*:*:*:*:*10.2.13 h16VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h18:*:*:*:*:*:*10.2.13 h18VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h2:*:*:*:*:*:*10.2.13 h2VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h21:*:*:*:*:*:*10.2.13 h21VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h22:*:*:*:*:*:*10.2.13 h22VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h23:*:*:*:*:*:*10.2.13 h23VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h24:*:*:*:*:*:*10.2.13 h24VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h26:*:*:*:*:*:*10.2.13 h26VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h3:*:*:*:*:*:*10.2.13 h3VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h4:*:*:*:*:*:*10.2.13 h4VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h5:*:*:*:*:*:*10.2.13 h5VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h7:*:*:*:*:*:*10.2.13 h7VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.14:*:*:*:*:*:*:*10.2.14VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.15:-:*:*:*:*:*:*10.2.15VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:-:*:*:*:*:*:*10.2.16VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h1:*:*:*:*:*:*10.2.16 h1VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h10:*:*:*:*:*:*10.2.16 h10VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h11:*:*:*:*:*:*10.2.16 h11VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h4:*:*:*:*:*:*10.2.16 h4VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h6:*:*:*:*:*:*10.2.16 h6VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h7:*:*:*:*:*:*10.2.16 h7VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h8:*:*:*:*:*:*10.2.16 h8VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h9:*:*:*:*:*:*10.2.16 h9VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.17:-:*:*:*:*:*:*10.2.17VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.18:-:*:*:*:*:*:*10.2.18VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.18:h1:*:*:*:*:*:*10.2.18 h1VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.18:h10:*:*:*:*:*:*10.2.18 h10VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.18:h12:*:*:*:*:*:*10.2.18 h12VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.18:h5:*:*:*:*:*:*10.2.18 h5VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.18:h6:*:*:*:*:*:*10.2.18 h6VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.18:h7:*:*:*:*:*:*10.2.18 h7VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.18:h8:*:*:*:*:*:*10.2.18 h8VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.18:h9:*:*:*:*:*:*10.2.18 h9VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*11.1.0 to before 11.1.4VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:-:*:*:*:*:*:*11.1.4VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h1:*:*:*:*:*:*11.1.4 h1VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h10:*:*:*:*:*:*11.1.4 h10VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h11:*:*:*:*:*:*11.1.4 h11VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h12:*:*:*:*:*:*11.1.4 h12VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h13:*:*:*:*:*:*11.1.4 h13VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h15:*:*:*:*:*:*11.1.4 h15VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h16:*:*:*:*:*:*11.1.4 h16VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h17:*:*:*:*:*:*11.1.4 h17VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h18:*:*:*:*:*:*11.1.4 h18VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h2:*:*:*:*:*:*11.1.4 h2VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h25:*:*:*:*:*:*11.1.4 h25VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h27:*:*:*:*:*:*11.1.4 h27VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h3:*:*:*:*:*:*11.1.4 h3VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h32:*:*:*:*:*:*11.1.4 h32VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h33:*:*:*:*:*:*11.1.4 h33VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h34:*:*:*:*:*:*11.1.4 h34VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h35:*:*:*:*:*:*11.1.4 h35VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h36:*:*:*:*:*:*11.1.4 h36VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h37:*:*:*:*:*:*11.1.4 h37VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h4:*:*:*:*:*:*11.1.4 h4VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h5:*:*:*:*:*:*11.1.4 h5VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h6:*:*:*:*:*:*11.1.4 h6VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h7:*:*:*:*:*:*11.1.4 h7VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h8:*:*:*:*:*:*11.1.4 h8VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h9:*:*:*:*:*:*11.1.4 h9VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.5:*:*:*:*:*:*:*11.1.5VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:-:*:*:*:*:*:*11.1.6VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h1:*:*:*:*:*:*11.1.6 h1VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h10:*:*:*:*:*:*11.1.6 h10VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h14:*:*:*:*:*:*11.1.6 h14VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h17:*:*:*:*:*:*11.1.6 h17VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h18:*:*:*:*:*:*11.1.6 h18VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h19:*:*:*:*:*:*11.1.6 h19VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h2:*:*:*:*:*:*11.1.6 h2VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h20:*:*:*:*:*:*11.1.6 h20VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h21:*:*:*:*:*:*11.1.6 h21VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h22:*:*:*:*:*:*11.1.6 h22VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h23:*:*:*:*:*:*11.1.6 h23VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h25:*:*:*:*:*:*11.1.6 h25VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h29:*:*:*:*:*:*11.1.6 h29VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h3:*:*:*:*:*:*11.1.6 h3VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h32:*:*:*:*:*:*11.1.6 h32VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h33:*:*:*:*:*:*11.1.6 h33VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h34:*:*:*:*:*:*11.1.6 h34VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h35:*:*:*:*:*:*11.1.6 h35VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h36:*:*:*:*:*:*11.1.6 h36VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h38:*:*:*:*:*:*11.1.6 h38VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h39:*:*:*:*:*:*11.1.6 h39VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h4:*:*:*:*:*:*11.1.6 h4VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h5:*:*:*:*:*:*11.1.6 h5VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h6:*:*:*:*:*:*11.1.6 h6VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h7:*:*:*:*:*:*11.1.6 h7VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.7:-:*:*:*:*:*:*11.1.7VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.7:h1:*:*:*:*:*:*11.1.7 h1VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.7:h10:*:*:*:*:*:*11.1.7 h10VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.7:h11:*:*:*:*:*:*11.1.7 h11VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.7:h2:*:*:*:*:*:*11.1.7 h2VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.7:h4:*:*:*:*:*:*11.1.7 h4VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.7:h6:*:*:*:*:*:*11.1.7 h6VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.7:h8:*:*:*:*:*:*11.1.7 h8VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.8:-:*:*:*:*:*:*11.1.8VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.9:-:*:*:*:*:*:*11.1.9VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:-:*:*:*:*:*:*11.1.10VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h1:*:*:*:*:*:*11.1.10 h1VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h10:*:*:*:*:*:*11.1.10 h10VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h12:*:*:*:*:*:*11.1.10 h12VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h21:*:*:*:*:*:*11.1.10 h21VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h25:*:*:*:*:*:*11.1.10 h25VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h26:*:*:*:*:*:*11.1.10 h26VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h27:*:*:*:*:*:*11.1.10 h27VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h28:*:*:*:*:*:*11.1.10 h28VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h30:*:*:*:*:*:*11.1.10 h30VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h32:*:*:*:*:*:*11.1.10 h32VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h33:*:*:*:*:*:*11.1.10 h33VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h35:*:*:*:*:*:*11.1.10 h35VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h4:*:*:*:*:*:*11.1.10 h4VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h5:*:*:*:*:*:*11.1.10 h5VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h7:*:*:*:*:*:*11.1.10 h7VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h9:*:*:*:*:*:*11.1.10 h9VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.11:-:*:*:*:*:*:*11.1.11VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.12:-:*:*:*:*:*:*11.1.12VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:-:*:*:*:*:*:*11.1.13VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h1:*:*:*:*:*:*11.1.13 h1VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h10:*:*:*:*:*:*11.1.13 h10VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h11:*:*:*:*:*:*11.1.13 h11VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h12:*:*:*:*:*:*11.1.13 h12VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h15:*:*:*:*:*:*11.1.13 h15VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h2:*:*:*:*:*:*11.1.13 h2VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h3:*:*:*:*:*:*11.1.13 h3VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h5:*:*:*:*:*:*11.1.13 h5VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h6:*:*:*:*:*:*11.1.13 h6VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h7:*:*:*:*:*:*11.1.13 h7VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h8:*:*:*:*:*:*11.1.13 h8VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h9:*:*:*:*:*:*11.1.13 h9VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.14:-:*:*:*:*:*:*11.1.14VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.15:-:*:*:*:*:*:*11.1.15VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.16:-:*:*:*:*:*:*11.1.16VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.16:h1:*:*:*:*:*:*11.1.16 h1VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.16:h2:*:*:*:*:*:*11.1.16 h2VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.16:h3:*:*:*:*:*:*11.1.16 h3VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*11.2.0 to before 11.2.4VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:-:*:*:*:*:*:*11.2.4VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h1:*:*:*:*:*:*11.2.4 h1VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h10:*:*:*:*:*:*11.2.4 h10VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h11:*:*:*:*:*:*11.2.4 h11VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h12:*:*:*:*:*:*11.2.4 h12VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h14:*:*:*:*:*:*11.2.4 h14VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h15:*:*:*:*:*:*11.2.4 h15VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h17:*:*:*:*:*:*11.2.4 h17VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h18:*:*:*:*:*:*11.2.4 h18VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h2:*:*:*:*:*:*11.2.4 h2VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h20:*:*:*:*:*:*11.2.4 h20VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h3:*:*:*:*:*:*11.2.4 h3VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h4:*:*:*:*:*:*11.2.4 h4VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h5:*:*:*:*:*:*11.2.4 h5VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h6:*:*:*:*:*:*11.2.4 h6VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h7:*:*:*:*:*:*11.2.4 h7VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h8:*:*:*:*:*:*11.2.4 h8VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h9:*:*:*:*:*:*11.2.4 h9VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.5:*:*:*:*:*:*:*11.2.5VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.6:-:*:*:*:*:*:*11.2.6VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:-:*:*:*:*:*:*11.2.7VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h1:*:*:*:*:*:*11.2.7 h1VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h10:*:*:*:*:*:*11.2.7 h10VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h11:*:*:*:*:*:*11.2.7 h11VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h12:*:*:*:*:*:*11.2.7 h12VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h13:*:*:*:*:*:*11.2.7 h13VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h14:*:*:*:*:*:*11.2.7 h14VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h15:*:*:*:*:*:*11.2.7 h15VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h16:*:*:*:*:*:*11.2.7 h16VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h17:*:*:*:*:*:*11.2.7 h17VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h18:*:*:*:*:*:*11.2.7 h18VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h19:*:*:*:*:*:*11.2.7 h19VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h2:*:*:*:*:*:*11.2.7 h2VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h3:*:*:*:*:*:*11.2.7 h3VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h4:*:*:*:*:*:*11.2.7 h4VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h7:*:*:*:*:*:*11.2.7 h7VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h8:*:*:*:*:*:*11.2.7 h8VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.8:-:*:*:*:*:*:*11.2.8VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.9:*:*:*:*:*:*:*11.2.9VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:-:*:*:*:*:*:*11.2.10VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h1:*:*:*:*:*:*11.2.10 h1VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h10:*:*:*:*:*:*11.2.10 h10VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h12:*:*:*:*:*:*11.2.10 h12VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h13:*:*:*:*:*:*11.2.10 h13VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h2:*:*:*:*:*:*11.2.10 h2VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h3:*:*:*:*:*:*11.2.10 h3VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h4:*:*:*:*:*:*11.2.10 h4VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h5:*:*:*:*:*:*11.2.10 h5VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h6:*:*:*:*:*:*11.2.10 h6VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h7:*:*:*:*:*:*11.2.10 h7VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h8:*:*:*:*:*:*11.2.10 h8VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h9:*:*:*:*:*:*11.2.10 h9VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.11:-:*:*:*:*:*:*11.2.11VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.12:-:*:*:*:*:*:*11.2.12VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.13:-:*:*:*:*:*:*11.2.13VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.13:h1:*:*:*:*:*:*11.2.13 h1VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.13:h2:*:*:*:*:*:*11.2.13 h2VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.13:h3:*:*:*:*:*:*11.2.13 h3VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.15:-:*:*:*:*:*:*11.2.15VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.16:-:*:*:*:*:*:*11.2.16VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*12.1.0 to before 12.1.4VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:-:*:*:*:*:*:*12.1.4VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h10:*:*:*:*:*:*12.1.4 h10VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h11:*:*:*:*:*:*12.1.4 h11VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h12:*:*:*:*:*:*12.1.4 h12VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h2:*:*:*:*:*:*12.1.4 h2VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h3:*:*:*:*:*:*12.1.4 h3VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h5:*:*:*:*:*:*12.1.4 h5VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h6:*:*:*:*:*:*12.1.4 h6VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h7:*:*:*:*:*:*12.1.4 h7VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h8:*:*:*:*:*:*12.1.4 h8VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h9:*:*:*:*:*:*12.1.4 h9VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:12.1.5:-:*:*:*:*:*:*12.1.5VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:12.1.6:-:*:*:*:*:*:*12.1.6VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:12.1.7:-:*:*:*:*:*:*12.1.7VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:12.1.7:h1:*:*:*:*:*:*12.1.7 h1VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:12.1.7:h2:*:*:*:*:*:*12.1.7 h2VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:12.1.7:h3:*:*:*:*:*:*12.1.7 h3VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:12.1.7:h5:*:*:*:*:*:*12.1.7 h5VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:12.1.7:h6:*:*:*:*:*:*12.1.7 h6VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:12.1.7:h8:*:*:*:*:*:*12.1.7 h8VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:12.1.7:h9:*:*:*:*:*:*12.1.7 h9VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:12.1.8:-:*:*:*:*:*:*12.1.8VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:12.1.9:-:*:*:*:*:*:*12.1.9VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:12.1.10:-:*:*:*:*:*:*12.1.10VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:12.1.10:h2:*:*:*:*:*:*12.1.10 h2VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*12.2.0 to before 12.2.4VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:12.2.4:-:*:*:*:*:*:*12.2.4VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:-:*:*:*:*:*:*:*not specified by NVDVulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:h:paloaltonetworks:panorama_m-200:-:*:*:*:*:*:*:*not specified by NVDRunning onCyberArk Software, a Palo Alto Networks Company
cpe:2.3:h:paloaltonetworks:panorama_m-300:-:*:*:*:*:*:*:*not specified by NVDRunning onCyberArk Software, a Palo Alto Networks Company
cpe:2.3:h:paloaltonetworks:panorama_m-500:-:*:*:*:*:*:*:*not specified by NVDRunning onCyberArk Software, a Palo Alto Networks Company
cpe:2.3:h:paloaltonetworks:panorama_m-600:-:*:*:*:*:*:*:*not specified by NVDRunning onCyberArk Software, a Palo Alto Networks Company
cpe:2.3:h:paloaltonetworks:panorama_m-700:-:*:*:*:*:*:*:*not specified by NVDRunning onCyberArk Software, a Palo Alto Networks Company
cpe:2.3:a:paloaltonetworks:panorama_virtual_appliance:-:*:*:*:*:*:*:*not specified by NVDVulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:h:paloaltonetworks:wf-500:-:*:*:*:*:*:*:*not specified by NVDRunning onCyberArk Software, a Palo Alto Networks Company
cpe:2.3:h:paloaltonetworks:wf-500-b:-:*:*:*:*:*:*:*not specified by NVDRunning onCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:siemens:blueplanet_360_nx3_m6_wm_od_iisx_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSiemens
cpe:2.3:h:siemens:blueplanet_360_nx3_m6_wm_od_iisx:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:blueplanet_360_nx3_m6_wm_od_iisx-s_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSiemens
cpe:2.3:h:siemens:blueplanet_360_nx3_m6_wm_od_iisx-s:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:a:siemens:energy_engage:2.0:service_pack9:*:*:*:*:*:*2.0 service_pack9VulnerableSiemens
cpe:2.3:a:siemens:energy_engage:3.1:service_pack1:*:*:*:*:*:*3.1 service_pack1VulnerableSiemens
cpe:2.3:a:siemens:spectrum_power_4:-:*:*:*:*:*:*:*not specified by NVDVulnerableSiemens
cpe:2.3:a:siemens:spectrum_power_7:-:*:*:*:*:*:*:*not specified by NVDVulnerableSiemens
cpe:2.3:a:siemens:spectrum_power_tg:-:*:*:*:*:*:*:*not specified by NVDVulnerableSiemens
cpe:2.3:a:siemens:amis_ts:-:*:*:*:*:*:*:*not specified by NVDVulnerableSiemens

Remediation

Upgrade PHP to 8.2.35, 8.3.36, 8.4.27 or 8.5.12 for the matching branch. Red Hat fixes it in RHSA-2026:87072, RHSA-2026:87073, RHSA-2026:87079, RHSA-2026:87414, RHSA-2026:88532, RHSA-2026:88533, RHSA-2026:88561, RHSA-2026:88565, RHSA-2026:88659, RHSA-2026:88720, RHSA-2026:88725, RHSA-2026:88834, RHSA-2026:88835, RHSA-2026:89111 and RHSA-2026:90321, but has no fix planned for Red Hat Enterprise Linux 6 and none available for Red Hat Enterprise Linux 9. CISA requires U.S. federal agencies to fix it by 2026-10-29.

Written with Claude Haiku 5.5 from the sources below · 2026-10-30

  • Fix · CNA PHP (PHP Group) Fixed in 8.2.35, 8.3.36, 8.4.27, 8.5.12

Red Hat 19 advisories

  • RHSA-2026:89111 Released 2026-10-26 · Red Hat rating Important
    php:8.3 security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) apcu-panel-5.1.23-1.module+el9.6.0+22647+1741ae35.noarch::php:8.3, php-8.3.19-1.module+el9.6.0+25160+f8b750a4.3.aarch64::php:8.3, php-8.3.19-1.module+el9.6.0+25160+f8b750a4.3.ppc64le::php:8.3 +47
  • RHSA-2026:90321 Released 2026-10-26 · Red Hat rating Critical
    Red Hat OpenShift Dev Spaces 3.31.0 Release.
    • Red Hat OpenShift Dev Spaces 3.31 registry.redhat.io/devspaces/code-rhel9, registry.redhat.io/devspaces/dashboard-rhel9, registry.redhat.io/devspaces/jetbrains-ide-rhel9 +8
  • RHSA-2026:88835 Released 2026-10-23 · Red Hat rating Important
    php:8.2 security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) apcu-panel-5.1.23-1.module+el9.4.0+20748+b46899d2.noarch::php:8.2, php-8.2.13-1.module+el9.4.0+25177+88c847cf.4.aarch64::php:8.2, php-8.2.13-1.module+el9.4.0+25177+88c847cf.4.ppc64le::php:8.2 +47
Show 16 more Red Hat advisories
  • RHSA-2026:88834 Released 2026-10-23 · Red Hat rating Important
    php:8.2 security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) apcu-panel-5.1.23-1.module+el9.4.0+20748+b46899d2.noarch::php:8.2, php-8.2.28-1.module+el9.6.0+25176+d8415d54.4.aarch64::php:8.2, php-8.2.28-1.module+el9.6.0+25176+d8415d54.4.ppc64le::php:8.2 +47
  • RHSA-2026:88720 Released 2026-10-23 · Red Hat rating Important
    php security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) php-8.0.30-3.el9_6.2, php-bcmath-8.0.30-3.el9_6.2, php-cli-8.0.30-3.el9_6.2 +22
  • RHSA-2026:88725 Released 2026-10-23 · Red Hat rating Important
    php security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) php-8.0.30-1.el9_4.2, php-bcmath-8.0.30-1.el9_4.2, php-cli-8.0.30-1.el9_4.2 +22
  • RHSA-2026:88659 Released 2026-10-23 · Red Hat rating Important
    php security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) php-8.0.30-1.el9_2.2, php-bcmath-8.0.30-1.el9_2.2, php-cli-8.0.30-1.el9_2.2 +22
  • RHSA-2026:88561 Released 2026-10-23 · Red Hat rating Important
    php security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) php-8.3.19-1.el10_0.2, php-bcmath-8.3.19-1.el10_0.2, php-cli-8.3.19-1.el10_0.2 +22
  • RHSA-2026:88565 Released 2026-10-23 · Red Hat rating Important
    php:7.4 security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) apcu-panel-5.1.18-1.module+el8.3.0+6678+b09f589e.noarch::php:7.4, libzip-1.6.1-1.module+el8.3.0+6678+b09f589e.src::php:7.4, libzip-1.6.1-1.module+el8.3.0+6678+b09f589e.x86_64::php:7.4 +41
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) apcu-panel-5.1.18-1.module+el8.3.0+6678+b09f589e.noarch::php:7.4, libzip-1.6.1-1.module+el8.3.0+6678+b09f589e.src::php:7.4, libzip-1.6.1-1.module+el8.3.0+6678+b09f589e.x86_64::php:7.4 +41
  • RHSA-2026:88532 Released 2026-10-23 · Red Hat rating Important
    php:7.4 security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) apcu-panel-5.1.18-1.module+el8.3.0+6678+b09f589e.noarch::php:7.4, libzip-1.6.1-1.module+el8.3.0+6678+b09f589e.ppc64le::php:7.4, libzip-1.6.1-1.module+el8.3.0+6678+b09f589e.src::php:7.4 +47
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) apcu-panel-5.1.18-1.module+el8.3.0+6678+b09f589e.noarch::php:7.4, libzip-1.6.1-1.module+el8.3.0+6678+b09f589e.src::php:7.4, libzip-1.6.1-1.module+el8.3.0+6678+b09f589e.x86_64::php:7.4 +41
  • RHSA-2026:88533 Released 2026-10-23 · Red Hat rating Important
    php:7.4 security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) apcu-panel-5.1.18-1.module+el8.3.0+6678+b09f589e.noarch::php:7.4, libzip-1.6.1-1.module+el8.3.0+6678+b09f589e.src::php:7.4, libzip-1.6.1-1.module+el8.3.0+6678+b09f589e.x86_64::php:7.4 +41
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) apcu-panel-5.1.18-1.module+el8.3.0+6678+b09f589e.noarch::php:7.4, libzip-1.6.1-1.module+el8.3.0+6678+b09f589e.src::php:7.4, libzip-1.6.1-1.module+el8.3.0+6678+b09f589e.x86_64::php:7.4 +41
  • RHSA-2026:87414 Released 2026-10-21 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images php-8.5.12-1.hum1@aarch64, php-8.5.12-1.hum1@s390x, php-8.5.12-1.hum1@src +47
  • RHSA-2026:87079 Released 2026-10-21 · Red Hat rating Important
    php:8.3 security update
    • Red Hat Enterprise Linux AppStream (v. 9) apcu-panel-5.1.23-1.module+el9.8.0+24343+756b4fcd.noarch::php:8.3, php-8.3.36-1.module+el9.8.0+25109+6886e21a.aarch64::php:8.3, php-8.3.36-1.module+el9.8.0+25109+6886e21a.ppc64le::php:8.3 +47
  • RHSA-2026:87072 Released 2026-10-21 · Red Hat rating Important
    php:8.2 security update
    • Red Hat Enterprise Linux AppStream (v. 9) apcu-panel-5.1.23-1.module+el9.7.0+24111+199d2cc4.noarch::php:8.2, php-8.2.35-1.module+el9.8.0+25111+a1450321.aarch64::php:8.2, php-8.2.35-1.module+el9.8.0+25111+a1450321.ppc64le::php:8.2 +47
  • RHSA-2026:87073 Released 2026-10-21 · Red Hat rating Important
    php:8.2 security update
    • Red Hat Enterprise Linux AppStream (v. 8) apcu-panel-5.1.23-1.module+el8.10.0+20770+a5eca186.noarch::php:8.2, libzip-1.7.3-1.module+el8.10.0+20770+a5eca186.aarch64::php:8.2, libzip-1.7.3-1.module+el8.10.0+20770+a5eca186.ppc64le::php:8.2 +47
  • RHSA-2026:87070 Released 2026-10-21 · Red Hat rating Important
    php security update
    • Red Hat Enterprise Linux AppStream (v. 10) php-8.3.36-1.el10_2, php-bcmath-8.3.36-1.el10_2, php-cli-8.3.36-1.el10_2 +22
  • RHSA-2026:87071 Released 2026-10-21 · Red Hat rating Important
    php8.4 security update
    • Red Hat Enterprise Linux AppStream (v. 10) php8.4-8.4.27-1.el10_2, php8.4-bcmath-8.4.27-1.el10_2, php8.4-cli-8.4.27-1.el10_2 +22
  • RHSA-2026:87151 Released 2026-10-21 · Red Hat rating Important
    php security update
    • Red Hat Enterprise Linux AppStream (v. 9) php-8.0.30-8.el9_8.1, php-bcmath-8.0.30-8.el9_8.1, php-cli-8.0.30-8.el9_8.1 +22
  • RHSA-2026:87080 Released 2026-10-21 · Red Hat rating Important
    php:7.4 security update
    • Red Hat Enterprise Linux AppStream (v. 8) apcu-panel-5.1.18-1.module+el8.10.0+22485+a3539972.noarch::php:7.4, libzip-1.6.1-1.module+el8.10.0+22485+a3539972.aarch64::php:7.4, libzip-1.6.1-1.module+el8.10.0+22485+a3539972.ppc64le::php:7.4 +47

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    PHP 8.2.35, 8.3.36 and 2 more versions

    2 records Highest priority Priority CRITICAL 2 CRITICAL

    Other records, highest priority first

    • TI-2026-78794 PHP remote code execution via stale global statePriority CRITICAL 99
    Show all 2 records →

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 6AffectedNo fix planned: Out of support scope
Red Hat Enterprise Linux 9AffectedNo fix yet
Red Hat Enterprise Linux AppStream (v. 10)Fixed RHSA-2026:87070, RHSA-2026:87071
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2026:87073, RHSA-2026:87080
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2026:87072, RHSA-2026:87079, RHSA-2026:87151
Red Hat Enterprise Linux AppStream AUS (v.8.4)Fixed RHSA-2026:88565
Red Hat Enterprise Linux AppStream AUS (v.8.6)Fixed RHSA-2026:88533
Red Hat Enterprise Linux AppStream E4S (v.8.8)Fixed RHSA-2026:88532
Red Hat Enterprise Linux AppStream E4S (v.9.2)Fixed RHSA-2026:88659
Red Hat Enterprise Linux AppStream E4S (v.9.4)Fixed RHSA-2026:88725, RHSA-2026:88835
Red Hat Enterprise Linux AppStream EUS (v. 10.0)Fixed RHSA-2026:88561
Red Hat Enterprise Linux AppStream EUS (v.9.6)Fixed RHSA-2026:88720, RHSA-2026:88834, RHSA-2026:89111
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)Fixed RHSA-2026:88565
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)Fixed RHSA-2026:88533
Red Hat Enterprise Linux AppStream TUS (v.8.8)Fixed RHSA-2026:88532
Red Hat Hardened ImagesFixed RHSA-2026:87414
Red Hat OpenShift Dev Spaces 3.31Fixed RHSA-2026:90321
Not affected: 4 products
  • Red Hat Enterprise Linux 7
  • Red Hat OpenShift AI (RHOAI)
  • Red Hat OpenShift Dev Spaces
  • Red Hat OpenShift Dev Spaces 3.31

Timeline

  1. 2026-10-21 Threatist record created from CVE-2026-109618
  2. 2026-10-21 CISA SSVC decision points changed
  3. 2026-10-21 Priority changed: MEDIUM → LOW
  4. 2026-10-21 Fix available: RHSA-2026:87080 · Red Hat
  5. 2026-10-21 Fix available: Red Hat Enterprise Linux AppStream (v. 8) · Red Hat
  6. 2026-10-21 CVSS score added · Red Hat
  7. 2026-10-21 CVSS score added · NVD
  8. 2026-10-22 Fix available: RHSA-2026:87414 · Red Hat
  9. 2026-10-22 Fix available: RHSA-2026:87071 · Red Hat
  10. 2026-10-22 Fix available: RHSA-2026:87070 · Red Hat
  11. 2026-10-22 Fix available: RHSA-2026:87079 · Red Hat
  12. 2026-10-22 Fix available: RHSA-2026:87073 · Red Hat
  13. 2026-10-22 Fix available: RHSA-2026:87072 · Red Hat
  14. 2026-10-22 Fix available: RHSA-2026:87151 · Red Hat
  15. 2026-10-23 CISA SSVC decision points changed
  16. 2026-10-23 Fix available: RHSA-2026:88532 · Red Hat
  17. 2026-10-23 Fix available: RHSA-2026:88533 · Red Hat
  18. 2026-10-23 Fix available: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux AppStream AUS (v.8.6) +4 · Red Hat
  19. 2026-10-23 Priority changed: LOW → MEDIUM
  20. 2026-10-24 Fix available: RHSA-2026:88561 · Red Hat
  21. 2026-10-24 Fix available: RHSA-2026:88565 · Red Hat
  22. 2026-10-24 Fix available: RHSA-2026:88659 · Red Hat
  23. 2026-10-24 Fix available: RHSA-2026:88720 · Red Hat
  24. 2026-10-24 Fix available: RHSA-2026:88834 · Red Hat
  25. 2026-10-24 Fix available: RHSA-2026:88725 · Red Hat
  26. 2026-10-24 Fix available: RHSA-2026:88835 · Red Hat
  27. 2026-10-24 Fix available: Red Hat Enterprise Linux AppStream AUS (v.8.4), Red Hat Enterprise Linux AppStream E4S (v.9.2), Red Hat Enterprise Linux AppStream E4S (v.9.4) +3 · Red Hat
  28. 2026-10-25 EPSS moved to the 99th percentile and above
  29. 2026-10-25 Priority changed: MEDIUM → CRITICAL
  30. 2026-10-26 Added to CISA KEV
  31. 2026-10-27 Affected versions changed · Red Hat
  32. 2026-10-27 CISA SSVC decision points changed
  33. 2026-10-28 CISA SSVC decision points changed
  34. 2026-10-29 Fix available: RHSA-2026:89111 · Red Hat
  35. 2026-10-29 Fix available: Red Hat OpenShift Dev Spaces 3.31 · Red Hat
  36. 2026-10-30 Fix available: RHSA-2026:90321 · Red Hat

References

Advisory 9

  • TI-2024-04260 Argument Injection in PHP-CGI KEVCVSS 3.1CRITICAL 9.8
  • TI-2026-78794 PHP remote code execution via stale global state KEVCVSS 4.0CRITICAL 9.2
  • TI-2024-01743 Command injection via array-ish $command parameter of proc_open() CVSS 3.1CRITICAL 9.4
  • TI-2022-13555 PDO::quote() may return unquoted string CVSS 3.1CRITICAL 9.1
  • TI-2024-10408 Reference counting in php_request_shutdown causes Use-After-Free CVSS 4.0CRITICAL 9.2
  • TI-2024-05189 Command injection via array-ish $command parameter of proc_open() (bypass CVE-2024-1874 fix) CVSS 3.1HIGH 8.8
See all 107 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences