https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T13:52:11.993603+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-07677 bdu:2024-07677 2026-10-05T13:52:12.146401+00:00 bdu:2024-07677 https://cve.radiocsirt.org/vuln/bell-cve-2024-8926 Withdrawn: BELL-CVE-2024-8926 — CVE-2024-8926 does not affect BellSoft software 2026-10-05T13:52:12.146460+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/bit-libphp-2024-8926 BIT-libphp-2024-8926 — PHP CGI Parameter Injection Vulnerability (CVE-2024-4577 bypass) 2026-10-05T13:52:12.146490+00:00

Affected: Bitnami: libphp

In PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, when using a certain non-standard configurations of Windows codepages, the fixes for  CVE-2024-4577 https://github.com/advisories/GHSA-vxpp-6299-mxw3  may still be bypassed and the same command injection related to Windows "Best Fit" codepage behavior can be achieved. This may allow a malicious user to pass options to PHP binary being run, and thus reveal the source code of scripts, run arbitrary PHP code on the server, etc.

 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0818 certfr-2024-avi-0818 — De multiples vulnérabilités ont été découvertes dans PHP. Certaines d'entre elles permettent à un attaquant de provoque… 2026-10-05T13:52:12.146539+00:00 certfr-2024-avi-0818 https://cve.radiocsirt.org/vuln/euvd-2026-258728 EUVD-2026-258728 2026-10-05T13:52:12.146565+00:00 EUVD-2026-258728 https://cve.radiocsirt.org/vuln/fkie_cve-2024-8926 fkie_cve-2024-8926 2026-10-05T13:52:12.146586+00:00

In PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, when using a certain non-standard configurations of Windows codepages, the fixes for  CVE-2024-4577 https://github.com/advisories/GHSA-vxpp-6299-mxw3  may still be bypassed and the same command injection related to Windows "Best Fit" codepage behavior can be achieved. This may allow a malicious user to pass options to PHP binary being run, and thus reveal the source code of scripts, run arbitrary PHP code on the server, etc.

 https://cve.radiocsirt.org/vuln/msrc_cve-2024-8926 msrc_CVE-2024-8926 — PHP CGI Parameter Injection Vulnerability (CVE-2024-4577 bypass) 2026-10-05T13:52:12.146626+00:00 msrc_CVE-2024-8926 https://cve.radiocsirt.org/vuln/oesa-2024-2248 OESA-2024-2248 — php security update 2026-10-05T13:52:12.146653+00:00

Affected: openEuler:20.03-LTS-SP4: php, openEuler:22.03-LTS-SP1: php, openEuler:24.03-LTS: php, openEuler:22.03-LTS-SP4: php, openEuler:22.03-LTS-SP3: php

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is fairly simple. The most common use of PHP coding is probably as a replacement for CGI scripts. %if 1 The php package contains the module (often referred to as mod_php) which adds support for the PHP language to Apache HTTP Server when running in prefork mode. This module is deprecated. %endif Security Fix(es):PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is fairly simple. The most common use of PHP coding is probably as a replacement for CGI scripts. The php package contains the module (often referred to as mod_php) which adds support for the PHP language to Apache HTTP Server. Security Fix(es): In PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, erroneous parsing of multipart form data contained in an HTTP POST request could lead to legitimate data not being processed. This could lead to malicious attacker able to control part of the submitted data being able to exclude portion of other data, potentially…

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-8926 Withdrawn: UBUNTU-CVE-2024-8926 2026-10-05T13:52:12.146724+00:00

Withdrawn by the publisher.

Affected: Ubuntu:Pro:14.04:LTS: php5, Ubuntu:Pro:16.04:LTS: php7.0, Ubuntu:Pro:18.04:LTS: php7.2, Ubuntu:20.04:LTS: php7.4, Ubuntu:22.04:LTS: php8.1, Ubuntu:24.04:LTS: php8.3

[Bypass of CVE-2024-4577, Parameter Injection Vulnerability]

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-2230 WID-SEC-W-2024-2230 — PHP: Mehrere Schwachstellen 2026-10-05T13:52:12.146770+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in PHP ausnutzen, um beliebigen Programmcode auszuführen, Informationen preiszugeben und andere nicht spezifizierte Angriffe durchzuführen.