https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:28:53.968098+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-04432 bdu:2024-04432 2026-10-02T19:28:53.977998+00:00 bdu:2024-04432 https://cve.radiocsirt.org/vuln/bell-cve-2024-4577 Withdrawn: BELL-CVE-2024-4577 — CVE-2024-4577 does not affect BellSoft software 2026-10-02T19:28:53.978035+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/bit-libphp-2024-4577 BIT-libphp-2024-4577 — Argument Injection in PHP-CGI 2026-10-02T19:28:53.978054+00:00

Affected: Bitnami: libphp

In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set up to use certain code pages, Windows may use "Best-Fit" behavior to replace characters in command line given to Win32 API functions. PHP CGI module may misinterpret those characters as PHP options, which may allow a malicious user to pass options to PHP binary being run, and thus reveal the source code of scripts, run arbitrary PHP code on the server, etc.

 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0468 certfr-2024-avi-0468 — De multiples vulnérabilités ont été découvertes dans PHP. Certaines d'entre elles permettent à un attaquant de provoque… 2026-10-02T19:28:53.978085+00:00 certfr-2024-avi-0468 https://cve.radiocsirt.org/vuln/euvd-2026-255632 EUVD-2026-255632 2026-10-02T19:28:53.978100+00:00 EUVD-2026-255632 https://cve.radiocsirt.org/vuln/fkie_cve-2024-4577 fkie_cve-2024-4577 2026-10-02T19:28:53.978111+00:00

In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set up to use certain code pages, Windows may use "Best-Fit" behavior to replace characters in command line given to Win32 API functions. PHP CGI module may misinterpret those characters as PHP options, which may allow a malicious user to pass options to PHP binary being run, and thus reveal the source code of scripts, run arbitrary PHP code on the server, etc.

 https://cve.radiocsirt.org/vuln/ghsa-vxpp-6299-mxw3 GHSA-vxpp-6299-mxw3 2026-10-02T19:28:53.978133+00:00

In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set up to use certain code pages, Windows may use "Best-Fit" behavior to replace characters in command line given to Win32 API functions. PHP CGI module may misinterpret those characters as PHP options, which may allow a malicious user to pass options to PHP binary being run, and thus reveal the source code of scripts, run arbitrary PHP code on the server, etc.

 https://cve.radiocsirt.org/vuln/msrc_cve-2024-4577 msrc_CVE-2024-4577 — Argument Injection in PHP-CGI 2026-10-02T19:28:53.978150+00:00 msrc_CVE-2024-4577 https://cve.radiocsirt.org/vuln/opensuse-su-2024:14376-1 openSUSE-SU-2024:14376-1 — php8-8.3.12-1.1 on GA media 2026-10-02T19:28:53.978165+00:00

php8-8.3.12-1.1 on GA media

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1320 WID-SEC-W-2024-1320 — PHP: Mehrere Schwachstellen 2026-10-02T19:28:53.978180+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in PHP ausnutzen, um beliebigen Programmcode auszuführen und um Sicherheitsmechanismen zu umgehen.