Read the docs
TI-2026-78794 Aliases CVE-2026-109619

PHP remote code execution via stale global state

Priority CRITICAL 99Exploited in the wildCWE-1325Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
High
Attack requirements
Present
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Partial Red Hat: 17 fixed, 2 without a fix

Attack profile from CVSS 4.0 · CNA. Fix status from CNA and Red Hat. Impact type from CWE-416 and the CVSS impact.

Summary

PHP 8.2.* before 8.2.35, 8.3.* before 8.3.36, 8.4.* before 8.4.27 and 8.5.* before 8.5.12 are affected. Global state can keep pointing into request memory after that memory is freed, a use after free (CWE-416), and later requests read this stale state. A remote unauthenticated attacker can trigger it to achieve remote code execution, though the attack conditions are demanding. CISA lists the flaw in KEV, added 2026-10-26.

Written with Claude Haiku 5.5 from the sources below · 2026-10-30

Description from the CNA

PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed. Subsequent requests may read or branch on this stale state before it is fully initialized. Multiple strategies can trigger this condition and produce remote code execution (RCE).

Why it matters now

Exploitation Active In CISA KEV since 2026-10-26CISA due date 2026-10-29
EPSS 0.99999 99th percentileScored 2026-11-07
Fix Partial PHP (PHP Group): 8.2.35, 8.3.36, 8.4.27 +1Red Hat: 20 advisoriesRed Hat: 17 fixed, 2 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Active
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
PHP GroupPHPbefore 8.2.35; before 8.3.36; before 8.4.27; before 8.5.128.2.35, 8.3.36, 8.4.27, 8.5.12Patch availableCNA
  • PHP VendorPHP Group Affected before 8.2.35; before 8.3.36; before 8.4.27; before 8.5.12 Fixed in 8.2.35, 8.3.36, 8.4.27, 8.5.12 Patch available CNA

CPE configurations NVD · 313

CPEVersionsRoleVendor
cpe:2.3:a:php:php:*:*:*:*:*:*:*:*5.4.0 to before 8.2.35; 8.3.0 to before 8.3.36; 8.4.0 to before 8.4.27; 8.5.0 to before 8.5.12VulnerablePHP
cpe:2.3:o:siemens:ruggedcom_ape1808_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSiemens
cpe:2.3:h:siemens:ruggedcom_ape1808:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*10.2.0 to before 10.2.7VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:-:*:*:*:*:*:*10.2.7VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h1:*:*:*:*:*:*10.2.7 h1VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h10:*:*:*:*:*:*10.2.7 h10VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h11:*:*:*:*:*:*10.2.7 h11VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h12:*:*:*:*:*:*10.2.7 h12VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h13:*:*:*:*:*:*10.2.7 h13VulnerableCyberArk Software, a Palo Alto Networks Company
Show 303 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h14:*:*:*:*:*:*10.2.7 h14VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h15:*:*:*:*:*:*10.2.7 h15VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h16:*:*:*:*:*:*10.2.7 h16VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h17:*:*:*:*:*:*10.2.7 h17VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h18:*:*:*:*:*:*10.2.7 h18VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h19:*:*:*:*:*:*10.2.7 h19VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h2:*:*:*:*:*:*10.2.7 h2VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h20:*:*:*:*:*:*10.2.7 h20VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h21:*:*:*:*:*:*10.2.7 h21VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h22:*:*:*:*:*:*10.2.7 h22VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h23:*:*:*:*:*:*10.2.7 h23VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h24:*:*:*:*:*:*10.2.7 h24VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h3:*:*:*:*:*:*10.2.7 h3VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h32:*:*:*:*:*:*10.2.7 h32VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h34:*:*:*:*:*:*10.2.7 h34VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h35:*:*:*:*:*:*10.2.7 h35VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h36:*:*:*:*:*:*10.2.7 h36VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h37:*:*:*:*:*:*10.2.7 h37VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h38:*:*:*:*:*:*10.2.7 h38VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h4:*:*:*:*:*:*10.2.7 h4VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h5:*:*:*:*:*:*10.2.7 h5VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h6:*:*:*:*:*:*10.2.7 h6VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h7:*:*:*:*:*:*10.2.7 h7VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h8:*:*:*:*:*:*10.2.7 h8VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h9:*:*:*:*:*:*10.2.7 h9VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.8:*:*:*:*:*:*:*10.2.8VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.9:*:*:*:*:*:*:*10.2.9VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:-:*:*:*:*:*:*10.2.10VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h1:*:*:*:*:*:*10.2.10 h1VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h10:*:*:*:*:*:*10.2.10 h10VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h11:*:*:*:*:*:*10.2.10 h11VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h12:*:*:*:*:*:*10.2.10 h12VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h13:*:*:*:*:*:*10.2.10 h13VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h14:*:*:*:*:*:*10.2.10 h14VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h17:*:*:*:*:*:*10.2.10 h17VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h18:*:*:*:*:*:*10.2.10 h18VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h2:*:*:*:*:*:*10.2.10 h2VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h21:*:*:*:*:*:*10.2.10 h21VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h27:*:*:*:*:*:*10.2.10 h27VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h3:*:*:*:*:*:*10.2.10 h3VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h30:*:*:*:*:*:*10.2.10 h30VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h31:*:*:*:*:*:*10.2.10 h31VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h36:*:*:*:*:*:*10.2.10 h36VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h37:*:*:*:*:*:*10.2.10 h37VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h39:*:*:*:*:*:*10.2.10 h39VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h4:*:*:*:*:*:*10.2.10 h4VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h40:*:*:*:*:*:*10.2.10 h40VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h41:*:*:*:*:*:*10.2.10 h41VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h5:*:*:*:*:*:*10.2.10 h5VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h6:*:*:*:*:*:*10.2.10 h6VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h7:*:*:*:*:*:*10.2.10 h7VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h8:*:*:*:*:*:*10.2.10 h8VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h9:*:*:*:*:*:*10.2.10 h9VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.11:*:*:*:*:*:*:*10.2.11VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.12:*:*:*:*:*:*:*10.2.12VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:-:*:*:*:*:*:*10.2.13VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h1:*:*:*:*:*:*10.2.13 h1VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h10:*:*:*:*:*:*10.2.13 h10VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h15:*:*:*:*:*:*10.2.13 h15VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h16:*:*:*:*:*:*10.2.13 h16VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h18:*:*:*:*:*:*10.2.13 h18VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h2:*:*:*:*:*:*10.2.13 h2VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h21:*:*:*:*:*:*10.2.13 h21VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h22:*:*:*:*:*:*10.2.13 h22VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h23:*:*:*:*:*:*10.2.13 h23VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h24:*:*:*:*:*:*10.2.13 h24VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h26:*:*:*:*:*:*10.2.13 h26VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h3:*:*:*:*:*:*10.2.13 h3VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h4:*:*:*:*:*:*10.2.13 h4VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h5:*:*:*:*:*:*10.2.13 h5VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h7:*:*:*:*:*:*10.2.13 h7VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.14:*:*:*:*:*:*:*10.2.14VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.15:-:*:*:*:*:*:*10.2.15VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:-:*:*:*:*:*:*10.2.16VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h1:*:*:*:*:*:*10.2.16 h1VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h10:*:*:*:*:*:*10.2.16 h10VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h11:*:*:*:*:*:*10.2.16 h11VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h4:*:*:*:*:*:*10.2.16 h4VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h6:*:*:*:*:*:*10.2.16 h6VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h7:*:*:*:*:*:*10.2.16 h7VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h8:*:*:*:*:*:*10.2.16 h8VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h9:*:*:*:*:*:*10.2.16 h9VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.17:-:*:*:*:*:*:*10.2.17VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.18:-:*:*:*:*:*:*10.2.18VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.18:h1:*:*:*:*:*:*10.2.18 h1VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.18:h10:*:*:*:*:*:*10.2.18 h10VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.18:h12:*:*:*:*:*:*10.2.18 h12VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.18:h5:*:*:*:*:*:*10.2.18 h5VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.18:h6:*:*:*:*:*:*10.2.18 h6VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.18:h7:*:*:*:*:*:*10.2.18 h7VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.18:h8:*:*:*:*:*:*10.2.18 h8VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:10.2.18:h9:*:*:*:*:*:*10.2.18 h9VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*11.1.0 to before 11.1.4VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:-:*:*:*:*:*:*11.1.4VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h1:*:*:*:*:*:*11.1.4 h1VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h10:*:*:*:*:*:*11.1.4 h10VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h11:*:*:*:*:*:*11.1.4 h11VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h12:*:*:*:*:*:*11.1.4 h12VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h13:*:*:*:*:*:*11.1.4 h13VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h15:*:*:*:*:*:*11.1.4 h15VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h16:*:*:*:*:*:*11.1.4 h16VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h17:*:*:*:*:*:*11.1.4 h17VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h18:*:*:*:*:*:*11.1.4 h18VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h2:*:*:*:*:*:*11.1.4 h2VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h25:*:*:*:*:*:*11.1.4 h25VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h27:*:*:*:*:*:*11.1.4 h27VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h3:*:*:*:*:*:*11.1.4 h3VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h32:*:*:*:*:*:*11.1.4 h32VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h33:*:*:*:*:*:*11.1.4 h33VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h34:*:*:*:*:*:*11.1.4 h34VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h35:*:*:*:*:*:*11.1.4 h35VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h36:*:*:*:*:*:*11.1.4 h36VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h37:*:*:*:*:*:*11.1.4 h37VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h4:*:*:*:*:*:*11.1.4 h4VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h5:*:*:*:*:*:*11.1.4 h5VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h6:*:*:*:*:*:*11.1.4 h6VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h7:*:*:*:*:*:*11.1.4 h7VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h8:*:*:*:*:*:*11.1.4 h8VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h9:*:*:*:*:*:*11.1.4 h9VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.5:*:*:*:*:*:*:*11.1.5VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:-:*:*:*:*:*:*11.1.6VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h1:*:*:*:*:*:*11.1.6 h1VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h10:*:*:*:*:*:*11.1.6 h10VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h14:*:*:*:*:*:*11.1.6 h14VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h17:*:*:*:*:*:*11.1.6 h17VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h18:*:*:*:*:*:*11.1.6 h18VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h19:*:*:*:*:*:*11.1.6 h19VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h2:*:*:*:*:*:*11.1.6 h2VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h20:*:*:*:*:*:*11.1.6 h20VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h21:*:*:*:*:*:*11.1.6 h21VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h22:*:*:*:*:*:*11.1.6 h22VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h23:*:*:*:*:*:*11.1.6 h23VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h25:*:*:*:*:*:*11.1.6 h25VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h29:*:*:*:*:*:*11.1.6 h29VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h3:*:*:*:*:*:*11.1.6 h3VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h32:*:*:*:*:*:*11.1.6 h32VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h33:*:*:*:*:*:*11.1.6 h33VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h34:*:*:*:*:*:*11.1.6 h34VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h35:*:*:*:*:*:*11.1.6 h35VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h36:*:*:*:*:*:*11.1.6 h36VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h38:*:*:*:*:*:*11.1.6 h38VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h39:*:*:*:*:*:*11.1.6 h39VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h4:*:*:*:*:*:*11.1.6 h4VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h5:*:*:*:*:*:*11.1.6 h5VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h6:*:*:*:*:*:*11.1.6 h6VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h7:*:*:*:*:*:*11.1.6 h7VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.7:-:*:*:*:*:*:*11.1.7VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.7:h1:*:*:*:*:*:*11.1.7 h1VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.7:h10:*:*:*:*:*:*11.1.7 h10VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.7:h11:*:*:*:*:*:*11.1.7 h11VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.7:h2:*:*:*:*:*:*11.1.7 h2VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.7:h4:*:*:*:*:*:*11.1.7 h4VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.7:h6:*:*:*:*:*:*11.1.7 h6VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.7:h8:*:*:*:*:*:*11.1.7 h8VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.8:-:*:*:*:*:*:*11.1.8VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.9:-:*:*:*:*:*:*11.1.9VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:-:*:*:*:*:*:*11.1.10VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h1:*:*:*:*:*:*11.1.10 h1VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h10:*:*:*:*:*:*11.1.10 h10VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h12:*:*:*:*:*:*11.1.10 h12VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h21:*:*:*:*:*:*11.1.10 h21VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h25:*:*:*:*:*:*11.1.10 h25VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h26:*:*:*:*:*:*11.1.10 h26VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h27:*:*:*:*:*:*11.1.10 h27VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h28:*:*:*:*:*:*11.1.10 h28VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h30:*:*:*:*:*:*11.1.10 h30VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h32:*:*:*:*:*:*11.1.10 h32VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h33:*:*:*:*:*:*11.1.10 h33VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h35:*:*:*:*:*:*11.1.10 h35VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h4:*:*:*:*:*:*11.1.10 h4VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h5:*:*:*:*:*:*11.1.10 h5VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h7:*:*:*:*:*:*11.1.10 h7VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h9:*:*:*:*:*:*11.1.10 h9VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.11:-:*:*:*:*:*:*11.1.11VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.12:-:*:*:*:*:*:*11.1.12VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:-:*:*:*:*:*:*11.1.13VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h1:*:*:*:*:*:*11.1.13 h1VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h10:*:*:*:*:*:*11.1.13 h10VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h11:*:*:*:*:*:*11.1.13 h11VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h12:*:*:*:*:*:*11.1.13 h12VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h15:*:*:*:*:*:*11.1.13 h15VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h2:*:*:*:*:*:*11.1.13 h2VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h3:*:*:*:*:*:*11.1.13 h3VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h5:*:*:*:*:*:*11.1.13 h5VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h6:*:*:*:*:*:*11.1.13 h6VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h7:*:*:*:*:*:*11.1.13 h7VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h8:*:*:*:*:*:*11.1.13 h8VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h9:*:*:*:*:*:*11.1.13 h9VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.14:-:*:*:*:*:*:*11.1.14VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.15:-:*:*:*:*:*:*11.1.15VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.16:-:*:*:*:*:*:*11.1.16VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.16:h1:*:*:*:*:*:*11.1.16 h1VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.16:h2:*:*:*:*:*:*11.1.16 h2VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.1.16:h3:*:*:*:*:*:*11.1.16 h3VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*11.2.0 to before 11.2.4VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:-:*:*:*:*:*:*11.2.4VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h1:*:*:*:*:*:*11.2.4 h1VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h10:*:*:*:*:*:*11.2.4 h10VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h11:*:*:*:*:*:*11.2.4 h11VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h12:*:*:*:*:*:*11.2.4 h12VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h14:*:*:*:*:*:*11.2.4 h14VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h15:*:*:*:*:*:*11.2.4 h15VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h17:*:*:*:*:*:*11.2.4 h17VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h18:*:*:*:*:*:*11.2.4 h18VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h2:*:*:*:*:*:*11.2.4 h2VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h20:*:*:*:*:*:*11.2.4 h20VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h3:*:*:*:*:*:*11.2.4 h3VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h4:*:*:*:*:*:*11.2.4 h4VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h5:*:*:*:*:*:*11.2.4 h5VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h6:*:*:*:*:*:*11.2.4 h6VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h7:*:*:*:*:*:*11.2.4 h7VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h8:*:*:*:*:*:*11.2.4 h8VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h9:*:*:*:*:*:*11.2.4 h9VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.5:*:*:*:*:*:*:*11.2.5VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.6:-:*:*:*:*:*:*11.2.6VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:-:*:*:*:*:*:*11.2.7VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h1:*:*:*:*:*:*11.2.7 h1VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h10:*:*:*:*:*:*11.2.7 h10VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h11:*:*:*:*:*:*11.2.7 h11VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h12:*:*:*:*:*:*11.2.7 h12VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h13:*:*:*:*:*:*11.2.7 h13VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h14:*:*:*:*:*:*11.2.7 h14VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h15:*:*:*:*:*:*11.2.7 h15VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h16:*:*:*:*:*:*11.2.7 h16VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h17:*:*:*:*:*:*11.2.7 h17VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h18:*:*:*:*:*:*11.2.7 h18VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h19:*:*:*:*:*:*11.2.7 h19VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h2:*:*:*:*:*:*11.2.7 h2VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h3:*:*:*:*:*:*11.2.7 h3VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h4:*:*:*:*:*:*11.2.7 h4VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h7:*:*:*:*:*:*11.2.7 h7VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h8:*:*:*:*:*:*11.2.7 h8VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.8:-:*:*:*:*:*:*11.2.8VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.9:*:*:*:*:*:*:*11.2.9VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:-:*:*:*:*:*:*11.2.10VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h1:*:*:*:*:*:*11.2.10 h1VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h10:*:*:*:*:*:*11.2.10 h10VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h12:*:*:*:*:*:*11.2.10 h12VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h13:*:*:*:*:*:*11.2.10 h13VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h2:*:*:*:*:*:*11.2.10 h2VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h3:*:*:*:*:*:*11.2.10 h3VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h4:*:*:*:*:*:*11.2.10 h4VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h5:*:*:*:*:*:*11.2.10 h5VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h6:*:*:*:*:*:*11.2.10 h6VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h7:*:*:*:*:*:*11.2.10 h7VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h8:*:*:*:*:*:*11.2.10 h8VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h9:*:*:*:*:*:*11.2.10 h9VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.11:-:*:*:*:*:*:*11.2.11VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.12:-:*:*:*:*:*:*11.2.12VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.13:-:*:*:*:*:*:*11.2.13VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.13:h1:*:*:*:*:*:*11.2.13 h1VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.13:h2:*:*:*:*:*:*11.2.13 h2VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.13:h3:*:*:*:*:*:*11.2.13 h3VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.15:-:*:*:*:*:*:*11.2.15VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:11.2.16:-:*:*:*:*:*:*11.2.16VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*12.1.0 to before 12.1.4VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:-:*:*:*:*:*:*12.1.4VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h10:*:*:*:*:*:*12.1.4 h10VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h11:*:*:*:*:*:*12.1.4 h11VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h12:*:*:*:*:*:*12.1.4 h12VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h2:*:*:*:*:*:*12.1.4 h2VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h3:*:*:*:*:*:*12.1.4 h3VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h5:*:*:*:*:*:*12.1.4 h5VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h6:*:*:*:*:*:*12.1.4 h6VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h7:*:*:*:*:*:*12.1.4 h7VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h8:*:*:*:*:*:*12.1.4 h8VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h9:*:*:*:*:*:*12.1.4 h9VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:12.1.5:-:*:*:*:*:*:*12.1.5VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:12.1.6:-:*:*:*:*:*:*12.1.6VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:12.1.7:-:*:*:*:*:*:*12.1.7VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:12.1.7:h1:*:*:*:*:*:*12.1.7 h1VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:12.1.7:h2:*:*:*:*:*:*12.1.7 h2VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:12.1.7:h3:*:*:*:*:*:*12.1.7 h3VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:12.1.7:h5:*:*:*:*:*:*12.1.7 h5VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:12.1.7:h6:*:*:*:*:*:*12.1.7 h6VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:12.1.7:h8:*:*:*:*:*:*12.1.7 h8VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:12.1.7:h9:*:*:*:*:*:*12.1.7 h9VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:12.1.8:-:*:*:*:*:*:*12.1.8VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:12.1.9:-:*:*:*:*:*:*12.1.9VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:12.1.10:-:*:*:*:*:*:*12.1.10VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:12.1.10:h2:*:*:*:*:*:*12.1.10 h2VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*12.2.0 to before 12.2.4VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:12.2.4:-:*:*:*:*:*:*12.2.4VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:o:paloaltonetworks:pan-os:-:*:*:*:*:*:*:*not specified by NVDVulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:h:paloaltonetworks:panorama_m-200:-:*:*:*:*:*:*:*not specified by NVDRunning onCyberArk Software, a Palo Alto Networks Company
cpe:2.3:h:paloaltonetworks:panorama_m-300:-:*:*:*:*:*:*:*not specified by NVDRunning onCyberArk Software, a Palo Alto Networks Company
cpe:2.3:h:paloaltonetworks:panorama_m-500:-:*:*:*:*:*:*:*not specified by NVDRunning onCyberArk Software, a Palo Alto Networks Company
cpe:2.3:h:paloaltonetworks:panorama_m-600:-:*:*:*:*:*:*:*not specified by NVDRunning onCyberArk Software, a Palo Alto Networks Company
cpe:2.3:h:paloaltonetworks:panorama_m-700:-:*:*:*:*:*:*:*not specified by NVDRunning onCyberArk Software, a Palo Alto Networks Company
cpe:2.3:a:paloaltonetworks:panorama_virtual_appliance:-:*:*:*:*:*:*:*not specified by NVDVulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:h:paloaltonetworks:wf-500:-:*:*:*:*:*:*:*not specified by NVDRunning onCyberArk Software, a Palo Alto Networks Company
cpe:2.3:h:paloaltonetworks:wf-500-b:-:*:*:*:*:*:*:*not specified by NVDRunning onCyberArk Software, a Palo Alto Networks Company
cpe:2.3:a:siemens:amis_ts:-:*:*:*:*:*:*:*not specified by NVDVulnerableSiemens
cpe:2.3:o:siemens:blueplanet_360_nx3_m6_wm_od_iisx-s_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSiemens
cpe:2.3:h:siemens:blueplanet_360_nx3_m6_wm_od_iisx-s:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:a:siemens:energy_engage:2.0:service_pack9:*:*:*:*:*:*2.0 service_pack9VulnerableSiemens
cpe:2.3:a:siemens:energy_engage:3.1:service_pack1:*:*:*:*:*:*3.1 service_pack1VulnerableSiemens
cpe:2.3:a:siemens:spectrum_power_3:-:*:*:*:*:*:*:*not specified by NVDVulnerableSiemens
cpe:2.3:a:siemens:spectrum_power_4:-:*:*:*:*:*:*:*not specified by NVDVulnerableSiemens
cpe:2.3:a:siemens:spectrum_power_7:-:*:*:*:*:*:*:*not specified by NVDVulnerableSiemens
cpe:2.3:a:siemens:spectrum_power_tg:-:*:*:*:*:*:*:*not specified by NVDVulnerableSiemens
cpe:2.3:o:siemens:blueplanet_360_nx3_m6_wm_od_iisx_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableSiemens
cpe:2.3:h:siemens:blueplanet_360_nx3_m6_wm_od_iisx:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens

Remediation

Update PHP to 8.2.35, 8.3.36, 8.4.27 or 8.5.12. Red Hat fixes are in advisories including RHSA-2026:87072, RHSA-2026:87079, RHSA-2026:88561, RHSA-2026:88834 and RHSA-2026:90321. The sources list no fixed version for Red Hat Enterprise Linux 6 (no fix planned) or Red Hat Enterprise Linux 9 (none available). CISA requires federal agencies to fix it by 2026-10-29.

Written with Claude Haiku 5.5 from the sources below · 2026-10-30

  • Fix · CNA PHP (PHP Group) Fixed in 8.2.35, 8.3.36, 8.4.27, 8.5.12

Red Hat 20 advisories

  • RHSA-2026:89111 Released 2026-10-26 · Red Hat rating Important
    php:8.3 security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) apcu-panel-5.1.23-1.module+el9.6.0+22647+1741ae35.noarch::php:8.3, php-8.3.19-1.module+el9.6.0+25160+f8b750a4.3.aarch64::php:8.3, php-8.3.19-1.module+el9.6.0+25160+f8b750a4.3.ppc64le::php:8.3 +47
  • RHSA-2026:90321 Released 2026-10-26 · Red Hat rating Critical
    Red Hat OpenShift Dev Spaces 3.31.0 Release.
    • Red Hat OpenShift Dev Spaces 3.31 registry.redhat.io/devspaces/code-rhel9, registry.redhat.io/devspaces/dashboard-rhel9, registry.redhat.io/devspaces/jetbrains-ide-rhel9 +8
  • RHSA-2026:88835 Released 2026-10-23 · Red Hat rating Important
    php:8.2 security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) apcu-panel-5.1.23-1.module+el9.4.0+20748+b46899d2.noarch::php:8.2, php-8.2.13-1.module+el9.4.0+25177+88c847cf.4.aarch64::php:8.2, php-8.2.13-1.module+el9.4.0+25177+88c847cf.4.ppc64le::php:8.2 +47
Show 17 more Red Hat advisories
  • RHSA-2026:88834 Released 2026-10-23 · Red Hat rating Important
    php:8.2 security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) apcu-panel-5.1.23-1.module+el9.4.0+20748+b46899d2.noarch::php:8.2, php-8.2.28-1.module+el9.6.0+25176+d8415d54.4.aarch64::php:8.2, php-8.2.28-1.module+el9.6.0+25176+d8415d54.4.ppc64le::php:8.2 +47
  • RHSA-2026:88720 Released 2026-10-23 · Red Hat rating Important
    php security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) php-8.0.30-3.el9_6.2, php-bcmath-8.0.30-3.el9_6.2, php-cli-8.0.30-3.el9_6.2 +22
  • RHSA-2026:88725 Released 2026-10-23 · Red Hat rating Important
    php security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) php-8.0.30-1.el9_4.2, php-bcmath-8.0.30-1.el9_4.2, php-cli-8.0.30-1.el9_4.2 +22
  • RHSA-2026:88693 Released 2026-10-23 · Red Hat rating Important
    php security update
    • Red Hat Enterprise Linux Server (v. 7 ELS) php-5.4.16-48.el7_9.1, php-cli-5.4.16-48.el7_9.1
    • Red Hat Enterprise Linux Server Optional (v. 7 ELS) php-embedded-5.4.16-48.el7_9.1, php-fpm-5.4.16-48.el7_9.1
  • RHSA-2026:88659 Released 2026-10-23 · Red Hat rating Important
    php security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) php-8.0.30-1.el9_2.2, php-bcmath-8.0.30-1.el9_2.2, php-cli-8.0.30-1.el9_2.2 +22
  • RHSA-2026:88561 Released 2026-10-23 · Red Hat rating Important
    php security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) php-8.3.19-1.el10_0.2, php-bcmath-8.3.19-1.el10_0.2, php-cli-8.3.19-1.el10_0.2 +22
  • RHSA-2026:88565 Released 2026-10-23 · Red Hat rating Important
    php:7.4 security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) apcu-panel-5.1.18-1.module+el8.3.0+6678+b09f589e.noarch::php:7.4, libzip-1.6.1-1.module+el8.3.0+6678+b09f589e.src::php:7.4, libzip-1.6.1-1.module+el8.3.0+6678+b09f589e.x86_64::php:7.4 +41
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) apcu-panel-5.1.18-1.module+el8.3.0+6678+b09f589e.noarch::php:7.4, libzip-1.6.1-1.module+el8.3.0+6678+b09f589e.src::php:7.4, libzip-1.6.1-1.module+el8.3.0+6678+b09f589e.x86_64::php:7.4 +41
  • RHSA-2026:88532 Released 2026-10-23 · Red Hat rating Important
    php:7.4 security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) apcu-panel-5.1.18-1.module+el8.3.0+6678+b09f589e.noarch::php:7.4, libzip-1.6.1-1.module+el8.3.0+6678+b09f589e.ppc64le::php:7.4, libzip-1.6.1-1.module+el8.3.0+6678+b09f589e.src::php:7.4 +47
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) apcu-panel-5.1.18-1.module+el8.3.0+6678+b09f589e.noarch::php:7.4, libzip-1.6.1-1.module+el8.3.0+6678+b09f589e.src::php:7.4, libzip-1.6.1-1.module+el8.3.0+6678+b09f589e.x86_64::php:7.4 +41
  • RHSA-2026:88533 Released 2026-10-23 · Red Hat rating Important
    php:7.4 security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) apcu-panel-5.1.18-1.module+el8.3.0+6678+b09f589e.noarch::php:7.4, libzip-1.6.1-1.module+el8.3.0+6678+b09f589e.src::php:7.4, libzip-1.6.1-1.module+el8.3.0+6678+b09f589e.x86_64::php:7.4 +41
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) apcu-panel-5.1.18-1.module+el8.3.0+6678+b09f589e.noarch::php:7.4, libzip-1.6.1-1.module+el8.3.0+6678+b09f589e.src::php:7.4, libzip-1.6.1-1.module+el8.3.0+6678+b09f589e.x86_64::php:7.4 +41
  • RHSA-2026:87414 Released 2026-10-21 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images php-8.5.12-1.hum1@aarch64, php-8.5.12-1.hum1@s390x, php-8.5.12-1.hum1@src +47
  • RHSA-2026:87079 Released 2026-10-21 · Red Hat rating Important
    php:8.3 security update
    • Red Hat Enterprise Linux AppStream (v. 9) apcu-panel-5.1.23-1.module+el9.8.0+24343+756b4fcd.noarch::php:8.3, php-8.3.36-1.module+el9.8.0+25109+6886e21a.aarch64::php:8.3, php-8.3.36-1.module+el9.8.0+25109+6886e21a.ppc64le::php:8.3 +47
  • RHSA-2026:87072 Released 2026-10-21 · Red Hat rating Important
    php:8.2 security update
    • Red Hat Enterprise Linux AppStream (v. 9) apcu-panel-5.1.23-1.module+el9.7.0+24111+199d2cc4.noarch::php:8.2, php-8.2.35-1.module+el9.8.0+25111+a1450321.aarch64::php:8.2, php-8.2.35-1.module+el9.8.0+25111+a1450321.ppc64le::php:8.2 +47
  • RHSA-2026:87073 Released 2026-10-21 · Red Hat rating Important
    php:8.2 security update
    • Red Hat Enterprise Linux AppStream (v. 8) apcu-panel-5.1.23-1.module+el8.10.0+20770+a5eca186.noarch::php:8.2, libzip-1.7.3-1.module+el8.10.0+20770+a5eca186.aarch64::php:8.2, libzip-1.7.3-1.module+el8.10.0+20770+a5eca186.ppc64le::php:8.2 +47
  • RHSA-2026:87070 Released 2026-10-21 · Red Hat rating Important
    php security update
    • Red Hat Enterprise Linux AppStream (v. 10) php-8.3.36-1.el10_2, php-bcmath-8.3.36-1.el10_2, php-cli-8.3.36-1.el10_2 +22
  • RHSA-2026:87071 Released 2026-10-21 · Red Hat rating Important
    php8.4 security update
    • Red Hat Enterprise Linux AppStream (v. 10) php8.4-8.4.27-1.el10_2, php8.4-bcmath-8.4.27-1.el10_2, php8.4-cli-8.4.27-1.el10_2 +22
  • RHSA-2026:87151 Released 2026-10-21 · Red Hat rating Important
    php security update
    • Red Hat Enterprise Linux AppStream (v. 9) php-8.0.30-8.el9_8.1, php-bcmath-8.0.30-8.el9_8.1, php-cli-8.0.30-8.el9_8.1 +22
  • RHSA-2026:87080 Released 2026-10-21 · Red Hat rating Important
    php:7.4 security update
    • Red Hat Enterprise Linux AppStream (v. 8) apcu-panel-5.1.18-1.module+el8.10.0+22485+a3539972.noarch::php:7.4, libzip-1.6.1-1.module+el8.10.0+22485+a3539972.aarch64::php:7.4, libzip-1.6.1-1.module+el8.10.0+22485+a3539972.ppc64le::php:7.4 +47

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    PHP 8.2.35, 8.3.36 and 2 more versions

    2 records Highest priority Priority CRITICAL 2 CRITICAL

    Other records, highest priority first

    • TI-2026-78793 Out-of-memory handling flaw in PHP allows remote code executionPriority CRITICAL 99
    Show all 2 records →

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 6AffectedNo fix planned: Out of support scope
Red Hat Enterprise Linux 9AffectedNo fix yet
Red Hat Enterprise Linux AppStream (v. 10)Fixed RHSA-2026:87070, RHSA-2026:87071
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2026:87073, RHSA-2026:87080
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2026:87072, RHSA-2026:87079, RHSA-2026:87151
Red Hat Enterprise Linux AppStream AUS (v.8.4)Fixed RHSA-2026:88565
Red Hat Enterprise Linux AppStream AUS (v.8.6)Fixed RHSA-2026:88533
Red Hat Enterprise Linux AppStream E4S (v.8.8)Fixed RHSA-2026:88532
Red Hat Enterprise Linux AppStream E4S (v.9.2)Fixed RHSA-2026:88659
Red Hat Enterprise Linux AppStream E4S (v.9.4)Fixed RHSA-2026:88725, RHSA-2026:88835
Red Hat Enterprise Linux AppStream EUS (v. 10.0)Fixed RHSA-2026:88561
Red Hat Enterprise Linux AppStream EUS (v.9.6)Fixed RHSA-2026:88720, RHSA-2026:88834, RHSA-2026:89111
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)Fixed RHSA-2026:88565
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)Fixed RHSA-2026:88533
Red Hat Enterprise Linux AppStream TUS (v.8.8)Fixed RHSA-2026:88532
Red Hat Enterprise Linux Server (v. 7 ELS)Fixed RHSA-2026:88693
Red Hat Enterprise Linux Server Optional (v. 7 ELS)Fixed RHSA-2026:88693
Red Hat Hardened ImagesFixed RHSA-2026:87414
Red Hat OpenShift Dev Spaces 3.31Fixed RHSA-2026:90321
Not affected: 5 products
  • Red Hat Enterprise Linux Server (v. 7 ELS)
  • Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • Red Hat OpenShift AI (RHOAI)
  • Red Hat OpenShift Dev Spaces
  • Red Hat OpenShift Dev Spaces 3.31

Timeline

  1. 2026-10-21 Threatist record created from CVE-2026-109619
  2. 2026-10-21 CISA SSVC decision points changed
  3. 2026-10-21 Priority changed: MEDIUM → LOW
  4. 2026-10-21 Fix available: RHSA-2026:87080 · Red Hat
  5. 2026-10-21 Fix available: Red Hat Enterprise Linux AppStream (v. 8) · Red Hat
  6. 2026-10-21 CVSS score added · Red Hat
  7. 2026-10-21 CVSS score added · NVD
  8. 2026-10-22 Fix available: RHSA-2026:87414 · Red Hat
  9. 2026-10-22 Fix available: RHSA-2026:87071 · Red Hat
  10. 2026-10-22 Fix available: RHSA-2026:87070 · Red Hat
  11. 2026-10-22 Fix available: RHSA-2026:87079 · Red Hat
  12. 2026-10-22 Fix available: RHSA-2026:87073 · Red Hat
  13. 2026-10-22 Fix available: RHSA-2026:87072 · Red Hat
  14. 2026-10-22 Fix available: RHSA-2026:87151 · Red Hat
  15. 2026-10-23 CISA SSVC decision points changed
  16. 2026-10-23 Fix available: RHSA-2026:88532 · Red Hat
  17. 2026-10-23 Fix available: RHSA-2026:88533 · Red Hat
  18. 2026-10-23 Fix available: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux AppStream AUS (v.8.6) +4 · Red Hat
  19. 2026-10-23 CVSS score changed · NVD
  20. 2026-10-23 Priority changed: LOW → MEDIUM
  21. 2026-10-24 Fix available: RHSA-2026:88561 · Red Hat
  22. 2026-10-24 Fix available: RHSA-2026:88565 · Red Hat
  23. 2026-10-24 Fix available: RHSA-2026:88659 · Red Hat
  24. 2026-10-24 Fix available: RHSA-2026:88720 · Red Hat
  25. 2026-10-24 Fix available: RHSA-2026:88834 · Red Hat
  26. 2026-10-24 Fix available: RHSA-2026:88725 · Red Hat
  27. 2026-10-24 Fix available: RHSA-2026:88835 · Red Hat
  28. 2026-10-24 Fix available: RHSA-2026:88693 · Red Hat
  29. 2026-10-24 Fix available: Red Hat Enterprise Linux AppStream AUS (v.8.4), Red Hat Enterprise Linux AppStream E4S (v.9.2), Red Hat Enterprise Linux AppStream E4S (v.9.4) +5 · Red Hat
  30. 2026-10-25 EPSS moved to the 99th percentile and above
  31. 2026-10-25 Priority changed: MEDIUM → CRITICAL
  32. 2026-10-26 Added to CISA KEV
  33. 2026-10-27 Affected versions changed · Red Hat
  34. 2026-10-27 CISA SSVC decision points changed
  35. 2026-10-28 CISA SSVC decision points changed
  36. 2026-10-29 Fix available: RHSA-2026:89111 · Red Hat
  37. 2026-10-29 Fix available: Red Hat OpenShift Dev Spaces 3.31 · Red Hat
  38. 2026-10-30 Fix available: RHSA-2026:90321 · Red Hat

References

Advisory 18

  • TI-2024-04260 Argument Injection in PHP-CGI KEVCVSS 3.1CRITICAL 9.8
  • TI-2026-78793 Out-of-memory handling flaw in PHP allows remote code execution KEVCVSS 4.0CRITICAL 9.2
  • TI-2024-01743 Command injection via array-ish $command parameter of proc_open() CVSS 3.1CRITICAL 9.4
  • TI-2022-13555 PDO::quote() may return unquoted string CVSS 3.1CRITICAL 9.1
  • TI-2024-10408 Reference counting in php_request_shutdown causes Use-After-Free CVSS 4.0CRITICAL 9.2
  • TI-2024-05189 Command injection via array-ish $command parameter of proc_open() (bypass CVE-2024-1874 fix) CVSS 3.1HIGH 8.8
See all 107 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences