CVE-2026-17544 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	9.8 CRITICAL	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 36.07%

Affected Products (NVD)

Vendor	Product	Version
php	php	8.4.0 ≤ 𝑥 < 8.4.24
php	php	8.5.0 ≤ 𝑥 < 8.5.9

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

php8.2

bookworm	8.2.32-1~deb12u1 fixed
bookworm (security)	8.2.33-1~deb12u1 fixed

php8.4

forky	8.4.24-1 fixed
sid	8.4.24-1 fixed
trixie	8.4.24-1~deb13u1 fixed
trixie (security)	8.4.24-1~deb13u1 fixed

Ubuntu Releases

Ubuntu Product

Codename

php5

jammy	dne
noble	dne
resolute	dne
trusty	not-affected

php7.0

jammy	dne
noble	dne
resolute	dne
xenial	not-affected

php7.2

bionic	not-affected
jammy	dne
noble	dne
resolute	dne

php7.4

focal	not-affected
jammy	dne
noble	dne
resolute	dne

php8.1

jammy	not-affected
noble	dne
resolute	dne

php8.3

jammy	dne
noble	not-affected
resolute	dne

php8.5

jammy	dne
noble	dne
resolute	Fixed 8.5.4-0ubuntu1.3 released

Amazon Linux Releases

Amazon Package

Release

php8.4

Amazon Linux 2023

0:8.4.24-1.amzn2023.0.1

fixed

php8.4-bcmath

Amazon Linux 2023

0:8.4.24-1.amzn2023.0.1

fixed

php8.4-bcmath-debuginfo

Amazon Linux 2023

0:8.4.24-1.amzn2023.0.1

fixed

php8.4-cli

Amazon Linux 2023

0:8.4.24-1.amzn2023.0.1

fixed

php8.4-cli-debuginfo

Amazon Linux 2023

0:8.4.24-1.amzn2023.0.1

fixed

php8.4-common

Amazon Linux 2023

0:8.4.24-1.amzn2023.0.1

fixed

php8.4-common-debuginfo

Amazon Linux 2023

0:8.4.24-1.amzn2023.0.1

fixed

php8.4-dba

Amazon Linux 2023

0:8.4.24-1.amzn2023.0.1

fixed

php8.4-dba-debuginfo

Amazon Linux 2023

0:8.4.24-1.amzn2023.0.1

fixed

php8.4-dbg

Amazon Linux 2023

0:8.4.24-1.amzn2023.0.1

fixed

php8.4-dbg-debuginfo

Amazon Linux 2023

0:8.4.24-1.amzn2023.0.1

fixed

php8.4-debuginfo

Amazon Linux 2023

0:8.4.24-1.amzn2023.0.1

fixed

php8.4-debugsource

Amazon Linux 2023

0:8.4.24-1.amzn2023.0.1

fixed

php8.4-devel

Amazon Linux 2023

0:8.4.24-1.amzn2023.0.1

fixed

php8.4-embedded

Amazon Linux 2023

0:8.4.24-1.amzn2023.0.1

fixed

php8.4-embedded-debuginfo

Amazon Linux 2023

0:8.4.24-1.amzn2023.0.1

fixed

php8.4-enchant

Amazon Linux 2023

0:8.4.24-1.amzn2023.0.1

fixed

php8.4-enchant-debuginfo

Amazon Linux 2023

0:8.4.24-1.amzn2023.0.1

fixed

php8.4-ffi

Amazon Linux 2023

0:8.4.24-1.amzn2023.0.1

fixed

php8.4-ffi-debuginfo

Amazon Linux 2023

0:8.4.24-1.amzn2023.0.1

fixed

php8.4-fpm

Amazon Linux 2023

0:8.4.24-1.amzn2023.0.1

fixed

php8.4-fpm-debuginfo

Amazon Linux 2023

0:8.4.24-1.amzn2023.0.1

fixed

php8.4-gd

Amazon Linux 2023

0:8.4.24-1.amzn2023.0.1

fixed

php8.4-gd-debuginfo

Amazon Linux 2023

0:8.4.24-1.amzn2023.0.1

fixed

php8.4-gmp

Amazon Linux 2023

0:8.4.24-1.amzn2023.0.1

fixed

php8.4-gmp-debuginfo

Amazon Linux 2023

0:8.4.24-1.amzn2023.0.1

fixed

php8.4-intl

Amazon Linux 2023

0:8.4.24-1.amzn2023.0.1

fixed

php8.4-intl-debuginfo

Amazon Linux 2023

0:8.4.24-1.amzn2023.0.1

fixed

php8.4-ldap

Amazon Linux 2023

0:8.4.24-1.amzn2023.0.1

fixed

php8.4-ldap-debuginfo

Amazon Linux 2023

0:8.4.24-1.amzn2023.0.1

fixed

php8.4-mbstring

Amazon Linux 2023

0:8.4.24-1.amzn2023.0.1

fixed

php8.4-mbstring-debuginfo

Amazon Linux 2023

0:8.4.24-1.amzn2023.0.1

fixed

php8.4-modphp

Amazon Linux 2023

0:8.4.24-1.amzn2023.0.1

fixed

php8.4-modphp-debuginfo

Amazon Linux 2023

0:8.4.24-1.amzn2023.0.1

fixed

php8.4-mysqlnd

Amazon Linux 2023

0:8.4.24-1.amzn2023.0.1

fixed

php8.4-mysqlnd-debuginfo

Amazon Linux 2023

0:8.4.24-1.amzn2023.0.1

fixed

php8.4-odbc

Amazon Linux 2023

0:8.4.24-1.amzn2023.0.1

fixed

php8.4-odbc-debuginfo

Amazon Linux 2023

0:8.4.24-1.amzn2023.0.1

fixed

php8.4-opcache

Amazon Linux 2023

0:8.4.24-1.amzn2023.0.1

fixed

php8.4-opcache-debuginfo

Amazon Linux 2023

0:8.4.24-1.amzn2023.0.1

fixed

php8.4-pdo

Amazon Linux 2023

0:8.4.24-1.amzn2023.0.1

fixed

php8.4-pdo-debuginfo

Amazon Linux 2023

0:8.4.24-1.amzn2023.0.1

fixed

php8.4-pgsql

Amazon Linux 2023

0:8.4.24-1.amzn2023.0.1

fixed

php8.4-pgsql-debuginfo

Amazon Linux 2023

0:8.4.24-1.amzn2023.0.1

fixed

php8.4-process

Amazon Linux 2023

0:8.4.24-1.amzn2023.0.1

fixed

php8.4-process-debuginfo

Amazon Linux 2023

0:8.4.24-1.amzn2023.0.1

fixed

php8.4-snmp

Amazon Linux 2023

0:8.4.24-1.amzn2023.0.1

fixed

php8.4-snmp-debuginfo

Amazon Linux 2023

0:8.4.24-1.amzn2023.0.1

fixed

php8.4-soap

Amazon Linux 2023

0:8.4.24-1.amzn2023.0.1

fixed

php8.4-soap-debuginfo

Amazon Linux 2023

0:8.4.24-1.amzn2023.0.1

fixed

php8.4-sodium

Amazon Linux 2023

0:8.4.24-1.amzn2023.0.1

fixed

php8.4-sodium-debuginfo

Amazon Linux 2023

0:8.4.24-1.amzn2023.0.1

fixed

php8.4-tidy

Amazon Linux 2023

0:8.4.24-1.amzn2023.0.1

fixed

php8.4-tidy-debuginfo

Amazon Linux 2023

0:8.4.24-1.amzn2023.0.1

fixed

php8.4-xml

Amazon Linux 2023

0:8.4.24-1.amzn2023.0.1

fixed

php8.4-xml-debuginfo

Amazon Linux 2023

0:8.4.24-1.amzn2023.0.1

fixed

php8.4-zip

Amazon Linux 2023

0:8.4.24-1.amzn2023.0.1

fixed

php8.4-zip-debuginfo

Amazon Linux 2023

0:8.4.24-1.amzn2023.0.1

fixed

php8.5

Amazon Linux 2023

0:8.5.9-1.amzn2023.0.1

fixed

php8.5-bcmath

Amazon Linux 2023

0:8.5.9-1.amzn2023.0.1

fixed

php8.5-bcmath-debuginfo

Amazon Linux 2023

0:8.5.9-1.amzn2023.0.1

fixed

php8.5-cli

Amazon Linux 2023

0:8.5.9-1.amzn2023.0.1

fixed

php8.5-cli-debuginfo

Amazon Linux 2023

0:8.5.9-1.amzn2023.0.1

fixed

php8.5-common

Amazon Linux 2023

0:8.5.9-1.amzn2023.0.1

fixed

php8.5-common-debuginfo

Amazon Linux 2023

0:8.5.9-1.amzn2023.0.1

fixed

php8.5-dba

Amazon Linux 2023

0:8.5.9-1.amzn2023.0.1

fixed

php8.5-dba-debuginfo

Amazon Linux 2023

0:8.5.9-1.amzn2023.0.1

fixed

php8.5-dbg

Amazon Linux 2023

0:8.5.9-1.amzn2023.0.1

fixed

php8.5-dbg-debuginfo

Amazon Linux 2023

0:8.5.9-1.amzn2023.0.1

fixed

php8.5-debuginfo

Amazon Linux 2023

0:8.5.9-1.amzn2023.0.1

fixed

php8.5-debugsource

Amazon Linux 2023

0:8.5.9-1.amzn2023.0.1

fixed

php8.5-devel

Amazon Linux 2023

0:8.5.9-1.amzn2023.0.1

fixed

php8.5-embedded

Amazon Linux 2023

0:8.5.9-1.amzn2023.0.1

fixed

php8.5-embedded-debuginfo

Amazon Linux 2023

0:8.5.9-1.amzn2023.0.1

fixed

php8.5-enchant

Amazon Linux 2023

0:8.5.9-1.amzn2023.0.1

fixed

php8.5-enchant-debuginfo

Amazon Linux 2023

0:8.5.9-1.amzn2023.0.1

fixed

php8.5-ffi

Amazon Linux 2023

0:8.5.9-1.amzn2023.0.1

fixed

php8.5-ffi-debuginfo

Amazon Linux 2023

0:8.5.9-1.amzn2023.0.1

fixed

php8.5-fpm

Amazon Linux 2023

0:8.5.9-1.amzn2023.0.1

fixed

php8.5-fpm-debuginfo

Amazon Linux 2023

0:8.5.9-1.amzn2023.0.1

fixed

php8.5-gd

Amazon Linux 2023

0:8.5.9-1.amzn2023.0.1

fixed

php8.5-gd-debuginfo

Amazon Linux 2023

0:8.5.9-1.amzn2023.0.1

fixed

php8.5-gmp

Amazon Linux 2023

0:8.5.9-1.amzn2023.0.1

fixed

php8.5-gmp-debuginfo

Amazon Linux 2023

0:8.5.9-1.amzn2023.0.1

fixed

php8.5-intl

Amazon Linux 2023

0:8.5.9-1.amzn2023.0.1

fixed

php8.5-intl-debuginfo

Amazon Linux 2023

0:8.5.9-1.amzn2023.0.1

fixed

php8.5-ldap

Amazon Linux 2023

0:8.5.9-1.amzn2023.0.1

fixed

php8.5-ldap-debuginfo

Amazon Linux 2023

0:8.5.9-1.amzn2023.0.1

fixed

php8.5-mbstring

Amazon Linux 2023

0:8.5.9-1.amzn2023.0.1

fixed

php8.5-mbstring-debuginfo

Amazon Linux 2023

0:8.5.9-1.amzn2023.0.1

fixed

php8.5-modphp

Amazon Linux 2023

0:8.5.9-1.amzn2023.0.1

fixed

php8.5-modphp-debuginfo

Amazon Linux 2023

0:8.5.9-1.amzn2023.0.1

fixed

php8.5-mysqlnd

Amazon Linux 2023

0:8.5.9-1.amzn2023.0.1

fixed

php8.5-mysqlnd-debuginfo

Amazon Linux 2023

0:8.5.9-1.amzn2023.0.1

fixed

php8.5-odbc

Amazon Linux 2023

0:8.5.9-1.amzn2023.0.1

fixed

php8.5-odbc-debuginfo

Amazon Linux 2023

0:8.5.9-1.amzn2023.0.1

fixed

php8.5-pdo

Amazon Linux 2023

0:8.5.9-1.amzn2023.0.1

fixed

php8.5-pdo-debuginfo

Amazon Linux 2023

0:8.5.9-1.amzn2023.0.1

fixed

php8.5-pgsql

Amazon Linux 2023

0:8.5.9-1.amzn2023.0.1

fixed

php8.5-pgsql-debuginfo

Amazon Linux 2023

0:8.5.9-1.amzn2023.0.1

fixed

php8.5-process

Amazon Linux 2023

0:8.5.9-1.amzn2023.0.1

fixed

php8.5-process-debuginfo

Amazon Linux 2023

0:8.5.9-1.amzn2023.0.1

fixed

php8.5-snmp

Amazon Linux 2023

0:8.5.9-1.amzn2023.0.1

fixed

php8.5-snmp-debuginfo

Amazon Linux 2023

0:8.5.9-1.amzn2023.0.1

fixed

php8.5-soap

Amazon Linux 2023

0:8.5.9-1.amzn2023.0.1

fixed

php8.5-soap-debuginfo

Amazon Linux 2023

0:8.5.9-1.amzn2023.0.1

fixed

php8.5-sodium

Amazon Linux 2023

0:8.5.9-1.amzn2023.0.1

fixed

php8.5-sodium-debuginfo

Amazon Linux 2023

0:8.5.9-1.amzn2023.0.1

fixed

php8.5-tidy

Amazon Linux 2023

0:8.5.9-1.amzn2023.0.1

fixed

php8.5-tidy-debuginfo

Amazon Linux 2023

0:8.5.9-1.amzn2023.0.1

fixed

php8.5-xml

Amazon Linux 2023

0:8.5.9-1.amzn2023.0.1

fixed

php8.5-xml-debuginfo

Amazon Linux 2023

0:8.5.9-1.amzn2023.0.1

fixed

php8.5-zip

Amazon Linux 2023

0:8.5.9-1.amzn2023.0.1

fixed

php8.5-zip-debuginfo

Amazon Linux 2023

0:8.5.9-1.amzn2023.0.1

fixed

Common Weakness Enumeration

CWE-787 - Out-of-bounds Write
The software writes data past the end, or before the beginning, of the intended buffer.

Vulnerability Media Exposure

[GERMAN] PHP: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in PHP ausnutzen, um SQL-Injection durchzuführen, beliebigen Code auszuführen, Daten zu manipulieren oder einen Denial-of-Service-Zustand auszulösen.
Published: 2026-07-30T22:00:00+00:00

References

https://github.com/php/php-src/security/advisories/GHSA-x692-q9x7-8c3f