https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T16:08:35.383560+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2025:23309 ALSA-2025:23309 — Moderate: php:8.3 security update 2026-10-02T16:08:35.418879+00:00

Affected: AlmaLinux:9: apcu-panel, AlmaLinux:9: php, AlmaLinux:9: php-bcmath, AlmaLinux:9: php-cli, AlmaLinux:9: php-common, AlmaLinux:9: php-dba, AlmaLinux:9: php-dbg, AlmaLinux:9: php-devel, AlmaLinux:9: php-embedded, AlmaLinux:9: php-enchant and 22 more

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

Security Fix(es):

* php: pgsql extension does not check for errors during escaping (CVE-2025-1735) * php: NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix (CVE-2025-6491) * php: PHP Hostname Null Character Vulnerability (CVE-2025-1220)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2025-10413 bdu:2025-10413 2026-10-02T16:08:35.418982+00:00 bdu:2025-10413 https://cve.radiocsirt.org/vuln/bell-cve-2025-1735 BELL-CVE-2025-1735 2026-10-02T16:08:35.419000+00:00

Affected: Alpaquita:23: php81, Alpaquita:25: php83, Alpaquita:stream: php83

 https://cve.radiocsirt.org/vuln/bit-libphp-2025-1735 BIT-libphp-2025-1735 — pgsql extension does not check for errors during escaping 2026-10-02T16:08:35.419022+00:00

Affected: Bitnami: libphp

In PHP versions:8.1.* before 8.1.33, 8.2.* before 8.2.29, 8.3.* before 8.3.23, 8.4.* pgsql and pdo_pgsql escaping functions do not check if the underlying quoting functions returned errors. This could cause crashes if Postgres server rejects the string as invalid.

 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0558 certfr-2025-avi-0558 — De multiples vulnérabilités ont été découvertes dans PHP. Certaines d'entre elles permettent à un attaquant de provoque… 2026-10-02T16:08:35.419044+00:00 certfr-2025-avi-0558 https://cve.radiocsirt.org/vuln/euvd-2026-259933 EUVD-2026-259933 2026-10-02T16:08:35.419059+00:00 EUVD-2026-259933 https://cve.radiocsirt.org/vuln/fkie_cve-2025-1735 fkie_cve-2025-1735 2026-10-02T16:08:35.419070+00:00

In PHP versions:8.1.* before 8.1.33, 8.2.* before 8.2.29, 8.3.* before 8.3.23, 8.4.* pgsql and pdo_pgsql escaping functions do not check if the underlying quoting functions returned errors. This could cause crashes if Postgres server rejects the string as invalid.

 https://cve.radiocsirt.org/vuln/msrc_cve-2025-1735 msrc_CVE-2025-1735 — pgsql extension does not check for errors during escaping 2026-10-02T16:08:35.419091+00:00 msrc_CVE-2025-1735 https://cve.radiocsirt.org/vuln/oesa-2025-1760 OESA-2025-1760 — php security update 2026-10-02T16:08:35.419107+00:00

Affected: openEuler:20.03-LTS-SP4: php

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is fairly simple. The most common use of PHP coding is probably as a replacement for CGI scripts. %if 1 The php package contains the module (often referred to as mod_php) which adds support for the PHP language to Apache HTTP Server when running in prefork mode. This module is deprecated. %endif Security Fix(es):

(CVE-2025-1220)

(CVE-2025-1735)

(CVE-2025-6491)

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15340-1 openSUSE-SU-2025:15340-1 — php8-8.4.10-1.1 on GA media 2026-10-02T16:08:35.419131+00:00

php8-8.4.10-1.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2025:02474-1 SUSE-SU-2025:02474-1 — Security update for php8 2026-10-02T16:08:35.419148+00:00

Security update for php8

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-1735 UBUNTU-CVE-2025-1735 2026-10-02T16:08:35.419163+00:00

Affected: Ubuntu:Pro:14.04:LTS: php5, Ubuntu:Pro:16.04:LTS: php7.0, Ubuntu:Pro:18.04:LTS: php7.2, Ubuntu:Pro:20.04:LTS: php7.4, Ubuntu:22.04:LTS: php8.1, Ubuntu:24.04:LTS: php8.3, Ubuntu:25.10: php8.4

In PHP versions:8.1.* before 8.1.33, 8.2.* before 8.2.29, 8.3.* before 8.3.23, 8.4.* pgsql and pdo_pgsql escaping functions do not check if the underlying quoting functions returned errors. This could cause crashes if Postgres server rejects the string as invalid.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1460 WID-SEC-W-2025-1460 — PHP: Mehrere Schwachstellen 2026-10-02T16:08:35.419190+00:00

Ein Angreifer kann mehrere Schwachstellen in PHP ausnutzen, um Denial of Service oder Server-Side Request-Forgery Angriffe durchzuführen.