Vulnerability · Published Jul 30, 2026 · Assigned by php

CVE-2026-17543SQL injection in ext-pgsql via E'...' backslash breakout

High 8.1

In plain English

A high-severity SQL injection in PHP from PHP Group. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 26% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.

Severity (CVSS 4.0)8.1High
Exploit odds (30 days)0.3%top 73.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack tooling1Public PoC

Official description

Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8apcu-panel5.1.18-1.module_el8.6.0+2750+78feabcbALSA-2026:62334
AlmaLinux:8apcu-panel5.1.23-1.module_el8.10.0+3796+30ed3ef7ALSA-2026:57574
AlmaLinux:9apcu-panel5.1.23-1.module_el9.6.0+151+5f31e576ALSA-2026:57539
AlmaLinux:9apcu-panel5.1.23-1.module_el9.4.0+65+49ff6472ALSA-2026:61903
AlmaLinux:8libzip1.7.3-1.module_el8.10.0+3796+30ed3ef7ALSA-2026:57574
AlmaLinux:8libzip1.6.1-1.module_el8.6.0+3239+bedf0508ALSA-2026:62334
AlmaLinux:8libzip1.6.1-1.module_el8.10.0+3935+28808425ALSA-2026:62334
AlmaLinux:8libzip1.6.1-1.module_el8.6.0+2750+78feabcbALSA-2026:62334
AlmaLinux:8libzip-devel1.6.1-1.module_el8.6.0+3239+bedf0508ALSA-2026:62334
AlmaLinux:8libzip-devel1.6.1-1.module_el8.10.0+3935+28808425ALSA-2026:62334
AlmaLinux:8libzip-devel1.7.3-1.module_el8.10.0+3796+30ed3ef7ALSA-2026:57574
AlmaLinux:8libzip-tools1.6.1-1.module_el8.6.0+2750+78feabcbALSA-2026:62334
AlmaLinux:8libzip-tools1.6.1-1.module_el8.6.0+3239+bedf0508ALSA-2026:62334
AlmaLinux:8libzip-tools1.7.3-1.module_el8.10.0+3796+30ed3ef7ALSA-2026:57574
AlmaLinux:8libzip-tools1.6.1-1.module_el8.10.0+3935+28808425ALSA-2026:62334
AlmaLinux:10php8.3.33-1.el10_2ALSA-2026:62614
AlmaLinux:8php7.4.33-6.module_el8.10.0+4266+b824362aALSA-2026:62334
AlmaLinux:8php8.2.33-1.module_el8.10.0+4258+937e8b44ALSA-2026:57574
AlmaLinux:9php8.2.33-1.module_el9.8.0+303+1bef6c12ALSA-2026:61903
AlmaLinux:9php8.3.33-1.module_el9.8.0+297+88e7f1bfALSA-2026:57539
AlmaLinux:9php8.3.33-1.module_el9.8.0+296+9aab6c42ALSA-2026:57539
AlmaLinux:9php8.0.30-8.el9_8ALSA-2026:61259
AlmaLinux:10php-bcmath8.3.33-1.el10_2ALSA-2026:62614
AlmaLinux:8php-bcmath7.4.33-6.module_el8.10.0+4266+b824362aALSA-2026:62334
AlmaLinux:8php-bcmath8.2.33-1.module_el8.10.0+4258+937e8b44ALSA-2026:57574
AlmaLinux:9php-bcmath8.3.33-1.module_el9.8.0+297+88e7f1bfALSA-2026:57539
AlmaLinux:9php-bcmath8.2.33-1.module_el9.8.0+303+1bef6c12ALSA-2026:61903
AlmaLinux:9php-bcmath8.0.30-8.el9_8ALSA-2026:61259
AlmaLinux:9php-bcmath8.3.33-1.module_el9.8.0+296+9aab6c42ALSA-2026:57539
AlmaLinux:10php-cli8.3.33-1.el10_2ALSA-2026:62614
AlmaLinux:8php-cli8.2.33-1.module_el8.10.0+4258+937e8b44ALSA-2026:57574
AlmaLinux:8php-cli7.4.33-6.module_el8.10.0+4266+b824362aALSA-2026:62334
AlmaLinux:9php-cli8.2.33-1.module_el9.8.0+303+1bef6c12ALSA-2026:61903
AlmaLinux:9php-cli8.3.33-1.module_el9.8.0+296+9aab6c42ALSA-2026:57539
AlmaLinux:9php-cli8.3.33-1.module_el9.8.0+297+88e7f1bfALSA-2026:57539
AlmaLinux:9php-cli8.0.30-8.el9_8ALSA-2026:61259
AlmaLinux:10php-common8.3.33-1.el10_2ALSA-2026:62614
AlmaLinux:8php-common8.2.33-1.module_el8.10.0+4258+937e8b44ALSA-2026:57574
AlmaLinux:8php-common7.4.33-6.module_el8.10.0+4266+b824362aALSA-2026:62334
AlmaLinux:9php-common8.3.33-1.module_el9.8.0+296+9aab6c42ALSA-2026:57539
AlmaLinux:9php-common8.3.33-1.module_el9.8.0+297+88e7f1bfALSA-2026:57539
AlmaLinux:9php-common8.0.30-8.el9_8ALSA-2026:61259
AlmaLinux:9php-common8.2.33-1.module_el9.8.0+303+1bef6c12ALSA-2026:61903
AlmaLinux:10php-dba8.3.33-1.el10_2ALSA-2026:62614
AlmaLinux:8php-dba8.2.33-1.module_el8.10.0+4258+937e8b44ALSA-2026:57574
AlmaLinux:8php-dba7.4.33-6.module_el8.10.0+4266+b824362aALSA-2026:62334
AlmaLinux:9php-dba8.0.30-8.el9_8ALSA-2026:61259
AlmaLinux:9php-dba8.3.33-1.module_el9.8.0+296+9aab6c42ALSA-2026:57539
AlmaLinux:9php-dba8.2.33-1.module_el9.8.0+303+1bef6c12ALSA-2026:61903
AlmaLinux:10php-dbg8.3.33-1.el10_2ALSA-2026:62614
AlmaLinux:8php-dbg7.4.33-6.module_el8.10.0+4266+b824362aALSA-2026:62334
AlmaLinux:8php-dbg8.2.33-1.module_el8.10.0+4258+937e8b44ALSA-2026:57574
AlmaLinux:9php-dbg8.3.33-1.module_el9.8.0+297+88e7f1bfALSA-2026:57539
AlmaLinux:9php-dbg8.3.33-1.module_el9.8.0+296+9aab6c42ALSA-2026:57539
AlmaLinux:9php-dbg8.2.33-1.module_el9.8.0+303+1bef6c12ALSA-2026:61903
AlmaLinux:9php-dbg8.0.30-8.el9_8ALSA-2026:61259
AlmaLinux:10php-devel8.3.33-1.el10_2ALSA-2026:62614
AlmaLinux:8php-devel7.4.33-6.module_el8.10.0+4266+b824362aALSA-2026:62334
AlmaLinux:8php-devel8.2.33-1.module_el8.10.0+4258+937e8b44ALSA-2026:57574
AlmaLinux:9php-devel8.3.33-1.module_el9.8.0+296+9aab6c42ALSA-2026:57539
AlmaLinux:9php-devel8.3.33-1.module_el9.8.0+297+88e7f1bfALSA-2026:57539
AlmaLinux:9php-devel8.2.33-1.module_el9.8.0+303+1bef6c12ALSA-2026:61903
AlmaLinux:9php-devel8.0.30-8.el9_8ALSA-2026:61259
AlmaLinux:10php-embedded8.3.33-1.el10_2ALSA-2026:62614
AlmaLinux:8php-embedded7.4.33-6.module_el8.10.0+4266+b824362aALSA-2026:62334
AlmaLinux:8php-embedded8.2.33-1.module_el8.10.0+4258+937e8b44ALSA-2026:57574
AlmaLinux:9php-embedded8.0.30-8.el9_8ALSA-2026:61259
AlmaLinux:9php-embedded8.3.33-1.module_el9.8.0+297+88e7f1bfALSA-2026:57539
AlmaLinux:9php-embedded8.3.33-1.module_el9.8.0+296+9aab6c42ALSA-2026:57539
AlmaLinux:9php-embedded8.2.33-1.module_el9.8.0+303+1bef6c12ALSA-2026:61903
AlmaLinux:10php-enchant8.3.33-1.el10_2ALSA-2026:62614
AlmaLinux:8php-enchant8.2.33-1.module_el8.10.0+4258+937e8b44ALSA-2026:57574
AlmaLinux:8php-enchant7.4.33-6.module_el8.10.0+4266+b824362aALSA-2026:62334
AlmaLinux:9php-enchant8.3.33-1.module_el9.8.0+297+88e7f1bfALSA-2026:57539
AlmaLinux:9php-enchant8.2.33-1.module_el9.8.0+303+1bef6c12ALSA-2026:61903
AlmaLinux:9php-enchant8.0.30-8.el9_8ALSA-2026:61259
AlmaLinux:9php-enchant8.3.33-1.module_el9.8.0+296+9aab6c42ALSA-2026:57539
AlmaLinux:10php-ffi8.3.33-1.el10_2ALSA-2026:62614
AlmaLinux:8php-ffi8.2.33-1.module_el8.10.0+4258+937e8b44ALSA-2026:57574
AlmaLinux:8php-ffi7.4.33-6.module_el8.10.0+4266+b824362aALSA-2026:62334
AlmaLinux:9php-ffi8.2.33-1.module_el9.8.0+303+1bef6c12ALSA-2026:61903
AlmaLinux:9php-ffi8.3.33-1.module_el9.8.0+297+88e7f1bfALSA-2026:57539
AlmaLinux:9php-ffi8.3.33-1.module_el9.8.0+296+9aab6c42ALSA-2026:57539
AlmaLinux:9php-ffi8.0.30-8.el9_8ALSA-2026:61259
AlmaLinux:10php-fpm8.3.33-1.el10_2ALSA-2026:62614
AlmaLinux:8php-fpm8.2.33-1.module_el8.10.0+4258+937e8b44ALSA-2026:57574
AlmaLinux:8php-fpm7.4.33-6.module_el8.10.0+4266+b824362aALSA-2026:62334
AlmaLinux:9php-fpm8.2.33-1.module_el9.8.0+303+1bef6c12ALSA-2026:61903
AlmaLinux:9php-fpm8.0.30-8.el9_8ALSA-2026:61259
AlmaLinux:9php-fpm8.3.33-1.module_el9.8.0+297+88e7f1bfALSA-2026:57539
AlmaLinux:9php-fpm8.3.33-1.module_el9.8.0+296+9aab6c42ALSA-2026:57539
AlmaLinux:10php-gd8.3.33-1.el10_2ALSA-2026:62614
AlmaLinux:8php-gd8.2.33-1.module_el8.10.0+4258+937e8b44ALSA-2026:57574
AlmaLinux:8php-gd7.4.33-6.module_el8.10.0+4266+b824362aALSA-2026:62334
AlmaLinux:9php-gd8.3.33-1.module_el9.8.0+296+9aab6c42ALSA-2026:57539
AlmaLinux:9php-gd8.0.30-8.el9_8ALSA-2026:61259
AlmaLinux:9php-gd8.3.33-1.module_el9.8.0+297+88e7f1bfALSA-2026:57539
AlmaLinux:9php-gd8.2.33-1.module_el9.8.0+303+1bef6c12ALSA-2026:61903
AlmaLinux:10php-gmp8.3.33-1.el10_2ALSA-2026:62614
AlmaLinux:8php-gmp8.2.33-1.module_el8.10.0+4258+937e8b44ALSA-2026:57574
AlmaLinux:8php-gmp7.4.33-6.module_el8.10.0+4266+b824362aALSA-2026:62334
AlmaLinux:9php-gmp8.3.33-1.module_el9.8.0+297+88e7f1bfALSA-2026:57539
AlmaLinux:9php-gmp8.3.33-1.module_el9.8.0+296+9aab6c42ALSA-2026:57539
AlmaLinux:9php-gmp8.0.30-8.el9_8ALSA-2026:61259
AlmaLinux:9php-gmp8.2.33-1.module_el9.8.0+303+1bef6c12ALSA-2026:61903
AlmaLinux:10php-intl8.3.33-1.el10_2ALSA-2026:62614
AlmaLinux:8php-intl7.4.33-6.module_el8.10.0+4266+b824362aALSA-2026:62334
AlmaLinux:8php-intl8.2.33-1.module_el8.10.0+4258+937e8b44ALSA-2026:57574
AlmaLinux:9php-intl8.0.30-8.el9_8ALSA-2026:61259
AlmaLinux:9php-intl8.2.33-1.module_el9.8.0+303+1bef6c12ALSA-2026:61903
AlmaLinux:9php-intl8.3.33-1.module_el9.8.0+296+9aab6c42ALSA-2026:57539
AlmaLinux:8php-json7.4.33-6.module_el8.10.0+4266+b824362aALSA-2026:62334
AlmaLinux:10php-ldap8.3.33-1.el10_2ALSA-2026:62614
AlmaLinux:8php-ldap7.4.33-6.module_el8.10.0+4266+b824362aALSA-2026:62334
AlmaLinux:8php-ldap8.2.33-1.module_el8.10.0+4258+937e8b44ALSA-2026:57574
AlmaLinux:9php-ldap8.3.33-1.module_el9.8.0+296+9aab6c42ALSA-2026:57539
AlmaLinux:9php-ldap8.3.33-1.module_el9.8.0+297+88e7f1bfALSA-2026:57539
AlmaLinux:9php-ldap8.2.33-1.module_el9.8.0+303+1bef6c12ALSA-2026:61903
AlmaLinux:9php-ldap8.0.30-8.el9_8ALSA-2026:61259
AlmaLinux:10php-mbstring8.3.33-1.el10_2ALSA-2026:62614
AlmaLinux:8php-mbstring8.2.33-1.module_el8.10.0+4258+937e8b44ALSA-2026:57574
AlmaLinux:8php-mbstring7.4.33-6.module_el8.10.0+4266+b824362aALSA-2026:62334
AlmaLinux:9php-mbstring8.3.33-1.module_el9.8.0+296+9aab6c42ALSA-2026:57539
AlmaLinux:9php-mbstring8.2.33-1.module_el9.8.0+303+1bef6c12ALSA-2026:61903
AlmaLinux:9php-mbstring8.3.33-1.module_el9.8.0+297+88e7f1bfALSA-2026:57539
AlmaLinux:9php-mbstring8.0.30-8.el9_8ALSA-2026:61259
AlmaLinux:10php-mysqlnd8.3.33-1.el10_2ALSA-2026:62614
AlmaLinux:8php-mysqlnd8.2.33-1.module_el8.10.0+4258+937e8b44ALSA-2026:57574
AlmaLinux:8php-mysqlnd7.4.33-6.module_el8.10.0+4266+b824362aALSA-2026:62334
AlmaLinux:9php-mysqlnd8.3.33-1.module_el9.8.0+297+88e7f1bfALSA-2026:57539
AlmaLinux:9php-mysqlnd8.3.33-1.module_el9.8.0+296+9aab6c42ALSA-2026:57539
AlmaLinux:9php-mysqlnd8.2.33-1.module_el9.8.0+303+1bef6c12ALSA-2026:61903
AlmaLinux:9php-mysqlnd8.0.30-8.el9_8ALSA-2026:61259
AlmaLinux:10php-odbc8.3.33-1.el10_2ALSA-2026:62614
AlmaLinux:8php-odbc8.2.33-1.module_el8.10.0+4258+937e8b44ALSA-2026:57574
AlmaLinux:8php-odbc7.4.33-6.module_el8.10.0+4266+b824362aALSA-2026:62334
AlmaLinux:9php-odbc8.3.33-1.module_el9.8.0+297+88e7f1bfALSA-2026:57539
AlmaLinux:9php-odbc8.3.33-1.module_el9.8.0+296+9aab6c42ALSA-2026:57539
AlmaLinux:9php-odbc8.0.30-8.el9_8ALSA-2026:61259
AlmaLinux:9php-odbc8.2.33-1.module_el9.8.0+303+1bef6c12ALSA-2026:61903
AlmaLinux:10php-opcache8.3.33-1.el10_2ALSA-2026:62614
AlmaLinux:8php-opcache7.4.33-6.module_el8.10.0+4266+b824362aALSA-2026:62334
AlmaLinux:8php-opcache8.2.33-1.module_el8.10.0+4258+937e8b44ALSA-2026:57574
AlmaLinux:9php-opcache8.2.33-1.module_el9.8.0+303+1bef6c12ALSA-2026:61903
AlmaLinux:9php-opcache8.0.30-8.el9_8ALSA-2026:61259
AlmaLinux:9php-opcache8.3.33-1.module_el9.8.0+296+9aab6c42ALSA-2026:57539
AlmaLinux:9php-opcache8.3.33-1.module_el9.8.0+297+88e7f1bfALSA-2026:57539
AlmaLinux:10php-pdo8.3.33-1.el10_2ALSA-2026:62614
AlmaLinux:8php-pdo7.4.33-6.module_el8.10.0+4266+b824362aALSA-2026:62334
AlmaLinux:8php-pdo8.2.33-1.module_el8.10.0+4258+937e8b44ALSA-2026:57574
AlmaLinux:9php-pdo8.0.30-8.el9_8ALSA-2026:61259
AlmaLinux:9php-pdo8.3.33-1.module_el9.8.0+296+9aab6c42ALSA-2026:57539
AlmaLinux:9php-pdo8.3.33-1.module_el9.8.0+297+88e7f1bfALSA-2026:57539
AlmaLinux:9php-pdo8.2.33-1.module_el9.8.0+303+1bef6c12ALSA-2026:61903
AlmaLinux:8php-pear1:1.10.14-1.module_el8.10.0+3796+30ed3ef7ALSA-2026:57574
AlmaLinux:8php-pear1:1.10.13-1.module_el8.10.0+3935+28808425ALSA-2026:62334
AlmaLinux:8php-pecl-apcu5.1.23-1.module_el8.10.0+3796+30ed3ef7ALSA-2026:57574
AlmaLinux:8php-pecl-apcu5.1.18-1.module_el8.6.0+2750+78feabcbALSA-2026:62334
AlmaLinux:8php-pecl-apcu5.1.18-1.module_el8.10.0+3935+28808425ALSA-2026:62334
AlmaLinux:9php-pecl-apcu5.1.23-1.module_el9.4.0+65+49ff6472ALSA-2026:61903
AlmaLinux:9php-pecl-apcu5.1.23-1.module_el9.6.0+151+5f31e576ALSA-2026:57539
AlmaLinux:9php-pecl-apcu5.1.23-1.module_el9.8.0+287+a9a5bb73ALSA-2026:57539
AlmaLinux:8php-pecl-apcu-devel5.1.23-1.module_el8.10.0+3796+30ed3ef7ALSA-2026:57574
AlmaLinux:8php-pecl-apcu-devel5.1.18-1.module_el8.6.0+2750+78feabcbALSA-2026:62334
AlmaLinux:8php-pecl-apcu-devel5.1.18-1.module_el8.10.0+3935+28808425ALSA-2026:62334
AlmaLinux:9php-pecl-apcu-devel5.1.23-1.module_el9.8.0+287+a9a5bb73ALSA-2026:57539
AlmaLinux:9php-pecl-apcu-devel5.1.23-1.module_el9.6.0+151+5f31e576ALSA-2026:57539
AlmaLinux:9php-pecl-apcu-devel5.1.23-1.module_el9.4.0+65+49ff6472ALSA-2026:61903
AlmaLinux:9php-pecl-redis66.1.0-3.module_el9.8.0+257+89d727f2ALSA-2026:57539
AlmaLinux:8php-pecl-rrd2.0.1-1.module_el8.10.0+3935+28808425ALSA-2026:62334
AlmaLinux:8php-pecl-rrd2.0.3-1.module_el8.10.0+3796+30ed3ef7ALSA-2026:57574
AlmaLinux:8php-pecl-rrd2.0.1-1.module_el8.6.0+3239+bedf0508ALSA-2026:62334
AlmaLinux:8php-pecl-rrd2.0.1-1.module_el8.6.0+2750+78feabcbALSA-2026:62334
AlmaLinux:9php-pecl-rrd2.0.3-4.module_el9.6.0+151+5f31e576ALSA-2026:57539
AlmaLinux:9php-pecl-rrd2.0.3-4.module_el9.8.0+287+a9a5bb73ALSA-2026:57539
AlmaLinux:9php-pecl-rrd2.0.3-4.module_el9.4.0+65+49ff6472ALSA-2026:61903
AlmaLinux:8php-pecl-xdebug2.9.5-1.module_el8.6.0+2750+78feabcbALSA-2026:62334
AlmaLinux:8php-pecl-xdebug2.9.5-1.module_el8.10.0+3935+28808425ALSA-2026:62334
AlmaLinux:8php-pecl-xdebug2.9.5-1.module_el8.6.0+3239+bedf0508ALSA-2026:62334
AlmaLinux:8php-pecl-xdebug33.2.2-2.module_el8.10.0+3796+30ed3ef7ALSA-2026:57574
AlmaLinux:9php-pecl-xdebug33.2.2-2.module_el9.4.0+65+49ff6472ALSA-2026:61903
AlmaLinux:9php-pecl-xdebug33.3.1-1.module_el9.6.0+151+5f31e576ALSA-2026:57539
AlmaLinux:9php-pecl-xdebug33.3.1-1.module_el9.8.0+287+a9a5bb73ALSA-2026:57539
AlmaLinux:8php-pecl-zip1.18.2-1.module_el8.10.0+3935+28808425ALSA-2026:62334
AlmaLinux:8php-pecl-zip1.18.2-1.module_el8.6.0+2750+78feabcbALSA-2026:62334
AlmaLinux:8php-pecl-zip1.22.3-1.module_el8.10.0+3796+30ed3ef7ALSA-2026:57574
AlmaLinux:8php-pecl-zip1.18.2-1.module_el8.6.0+3239+bedf0508ALSA-2026:62334
AlmaLinux:9php-pecl-zip1.22.3-1.module_el9.8.0+287+a9a5bb73ALSA-2026:57539
AlmaLinux:9php-pecl-zip1.22.3-1.module_el9.4.0+65+49ff6472ALSA-2026:61903
AlmaLinux:9php-pecl-zip1.22.3-1.module_el9.6.0+151+5f31e576ALSA-2026:57539
AlmaLinux:10php-pgsql8.3.33-1.el10_2ALSA-2026:62614
AlmaLinux:8php-pgsql7.4.33-6.module_el8.10.0+4266+b824362aALSA-2026:62334
AlmaLinux:8php-pgsql8.2.33-1.module_el8.10.0+4258+937e8b44ALSA-2026:57574
AlmaLinux:9php-pgsql8.3.33-1.module_el9.8.0+296+9aab6c42ALSA-2026:57539
AlmaLinux:9php-pgsql8.0.30-8.el9_8ALSA-2026:61259
AlmaLinux:9php-pgsql8.2.33-1.module_el9.8.0+303+1bef6c12ALSA-2026:61903
AlmaLinux:10php-process8.3.33-1.el10_2ALSA-2026:62614
AlmaLinux:8php-process7.4.33-6.module_el8.10.0+4266+b824362aALSA-2026:62334
AlmaLinux:8php-process8.2.33-1.module_el8.10.0+4258+937e8b44ALSA-2026:57574
AlmaLinux:9php-process8.2.33-1.module_el9.8.0+303+1bef6c12ALSA-2026:61903

Affected products (as reported)

VendorProductVersions
PHP Group PHP 8.2.* – before 8.2.338.3.* – before 8.3.338.4.* – before 8.4.248.5.* – before 8.5.9

Weakness: CWE-89 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:Y/R:U

References