Vulnerability · Published May 10, 2026 · Assigned by php
CVE-2026-6722Use-After-Free in SOAP using Apache map
High 7.7
In plain English
A high-severity use-after-free in PHP from PHP Group. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 60% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)7.7High
Exploit odds (30 days)0.9%top 40.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the SOAP extension's object deduplication mechanism stores pointers to PHP objects in a global map without incrementing their reference counts. When an apache:Map node contains duplicate keys, processing the second entry overwrites the first in the temporary result map, freeing the original PHP object while its stale pointer remains in the map. A subsequent href reference to the freed node can copy the dangling pointer into the result. As PHP string allocations can reclaim the freed memory region, an attacker with control over the SOAP request body can exploit this use-after-free to achieve remote code execution.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | apcu-panel | 5.1.23-1.module_el8.10.0+3796+30ed3ef7 | ALSA-2026:22305 |
| AlmaLinux:8 | apcu-panel | 5.1.18-1.module_el8.6.0+2750+78feabcb | ALSA-2026:34354 |
| AlmaLinux:9 | apcu-panel | 5.1.23-1.module_el9.4.0+65+49ff6472 | ALSA-2026:22143 |
| AlmaLinux:9 | apcu-panel | 5.1.23-1.module_el9.6.0+151+5f31e576 | ALSA-2026:22142 |
| AlmaLinux:8 | libzip | 1.6.1-1.module_el8.6.0+2750+78feabcb | ALSA-2026:34354 |
| AlmaLinux:8 | libzip | 1.6.1-1.module_el8.6.0+3239+bedf0508 | ALSA-2026:34354 |
| AlmaLinux:8 | libzip | 1.7.3-1.module_el8.10.0+3796+30ed3ef7 | ALSA-2026:22305 |
| AlmaLinux:8 | libzip | 1.6.1-1.module_el8.10.0+3935+28808425 | ALSA-2026:34354 |
| AlmaLinux:8 | libzip-devel | 1.6.1-1.module_el8.10.0+3935+28808425 | ALSA-2026:34354 |
| AlmaLinux:8 | libzip-devel | 1.7.3-1.module_el8.10.0+3796+30ed3ef7 | ALSA-2026:22305 |
| AlmaLinux:8 | libzip-devel | 1.6.1-1.module_el8.6.0+3239+bedf0508 | ALSA-2026:34354 |
| AlmaLinux:8 | libzip-tools | 1.7.3-1.module_el8.10.0+3796+30ed3ef7 | ALSA-2026:22305 |
| AlmaLinux:8 | libzip-tools | 1.6.1-1.module_el8.6.0+3239+bedf0508 | ALSA-2026:34354 |
| AlmaLinux:8 | libzip-tools | 1.6.1-1.module_el8.10.0+3935+28808425 | ALSA-2026:34354 |
| AlmaLinux:8 | libzip-tools | 1.6.1-1.module_el8.6.0+2750+78feabcb | ALSA-2026:34354 |
| AlmaLinux:10 | php | 8.3.31-1.el10_2 | ALSA-2026:23388 |
| AlmaLinux:8 | php | 7.4.33-4.module_el8.10.0+4209+2ed16ff0 | ALSA-2026:34354 |
| AlmaLinux:8 | php | 8.2.31-1.module_el8.10.0+4189+0784d4cc | ALSA-2026:22305 |
| AlmaLinux:9 | php | 8.2.31-1.module_el9.8.0+254+5708f44c | ALSA-2026:22143 |
| AlmaLinux:9 | php | 8.3.31-2.module_el9.8.0+255+747189f2 | ALSA-2026:22142 |
| AlmaLinux:9 | php | 8.0.30-6.el9_8 | ALSA-2026:33449 |
| AlmaLinux:10 | php-bcmath | 8.3.31-1.el10_2 | ALSA-2026:23388 |
| AlmaLinux:8 | php-bcmath | 7.4.33-4.module_el8.10.0+4209+2ed16ff0 | ALSA-2026:34354 |
| AlmaLinux:8 | php-bcmath | 8.2.31-1.module_el8.10.0+4189+0784d4cc | ALSA-2026:22305 |
| AlmaLinux:9 | php-bcmath | 8.3.31-2.module_el9.8.0+255+747189f2 | ALSA-2026:22142 |
| AlmaLinux:9 | php-bcmath | 8.0.30-6.el9_8 | ALSA-2026:33449 |
| AlmaLinux:9 | php-bcmath | 8.2.31-1.module_el9.8.0+254+5708f44c | ALSA-2026:22143 |
| AlmaLinux:10 | php-cli | 8.3.31-1.el10_2 | ALSA-2026:23388 |
| AlmaLinux:8 | php-cli | 7.4.33-4.module_el8.10.0+4209+2ed16ff0 | ALSA-2026:34354 |
| AlmaLinux:8 | php-cli | 8.2.31-1.module_el8.10.0+4189+0784d4cc | ALSA-2026:22305 |
| AlmaLinux:9 | php-cli | 8.2.31-1.module_el9.8.0+254+5708f44c | ALSA-2026:22143 |
| AlmaLinux:9 | php-cli | 8.0.30-6.el9_8 | ALSA-2026:33449 |
| AlmaLinux:9 | php-cli | 8.3.31-2.module_el9.8.0+255+747189f2 | ALSA-2026:22142 |
| AlmaLinux:10 | php-common | 8.3.31-1.el10_2 | ALSA-2026:23388 |
| AlmaLinux:8 | php-common | 8.2.31-1.module_el8.10.0+4189+0784d4cc | ALSA-2026:22305 |
| AlmaLinux:8 | php-common | 7.4.33-4.module_el8.10.0+4209+2ed16ff0 | ALSA-2026:34354 |
| AlmaLinux:9 | php-common | 8.0.30-6.el9_8 | ALSA-2026:33449 |
| AlmaLinux:9 | php-common | 8.3.31-2.module_el9.8.0+255+747189f2 | ALSA-2026:22142 |
| AlmaLinux:9 | php-common | 8.2.31-1.module_el9.8.0+254+5708f44c | ALSA-2026:22143 |
| AlmaLinux:10 | php-dba | 8.3.31-1.el10_2 | ALSA-2026:23388 |
| AlmaLinux:8 | php-dba | 8.2.31-1.module_el8.10.0+4189+0784d4cc | ALSA-2026:22305 |
| AlmaLinux:8 | php-dba | 7.4.33-4.module_el8.10.0+4209+2ed16ff0 | ALSA-2026:34354 |
| AlmaLinux:9 | php-dba | 8.2.31-1.module_el9.8.0+254+5708f44c | ALSA-2026:22143 |
| AlmaLinux:9 | php-dba | 8.3.31-2.module_el9.8.0+255+747189f2 | ALSA-2026:22142 |
| AlmaLinux:9 | php-dba | 8.0.30-6.el9_8 | ALSA-2026:33449 |
| AlmaLinux:10 | php-dbg | 8.3.31-1.el10_2 | ALSA-2026:23388 |
| AlmaLinux:8 | php-dbg | 8.2.31-1.module_el8.10.0+4189+0784d4cc | ALSA-2026:22305 |
| AlmaLinux:8 | php-dbg | 7.4.33-4.module_el8.10.0+4209+2ed16ff0 | ALSA-2026:34354 |
| AlmaLinux:9 | php-dbg | 8.3.31-2.module_el9.8.0+255+747189f2 | ALSA-2026:22142 |
| AlmaLinux:9 | php-dbg | 8.0.30-6.el9_8 | ALSA-2026:33449 |
| AlmaLinux:9 | php-dbg | 8.2.31-1.module_el9.8.0+254+5708f44c | ALSA-2026:22143 |
| AlmaLinux:10 | php-devel | 8.3.31-1.el10_2 | ALSA-2026:23388 |
| AlmaLinux:8 | php-devel | 8.2.31-1.module_el8.10.0+4189+0784d4cc | ALSA-2026:22305 |
| AlmaLinux:8 | php-devel | 7.4.33-4.module_el8.10.0+4209+2ed16ff0 | ALSA-2026:34354 |
| AlmaLinux:9 | php-devel | 8.3.31-2.module_el9.8.0+255+747189f2 | ALSA-2026:22142 |
| AlmaLinux:9 | php-devel | 8.0.30-6.el9_8 | ALSA-2026:33449 |
| AlmaLinux:9 | php-devel | 8.2.31-1.module_el9.8.0+254+5708f44c | ALSA-2026:22143 |
| AlmaLinux:10 | php-embedded | 8.3.31-1.el10_2 | ALSA-2026:23388 |
| AlmaLinux:8 | php-embedded | 7.4.33-4.module_el8.10.0+4209+2ed16ff0 | ALSA-2026:34354 |
| AlmaLinux:8 | php-embedded | 8.2.31-1.module_el8.10.0+4189+0784d4cc | ALSA-2026:22305 |
| AlmaLinux:9 | php-embedded | 8.3.31-2.module_el9.8.0+255+747189f2 | ALSA-2026:22142 |
| AlmaLinux:9 | php-embedded | 8.2.31-1.module_el9.8.0+254+5708f44c | ALSA-2026:22143 |
| AlmaLinux:9 | php-embedded | 8.0.30-6.el9_8 | ALSA-2026:33449 |
| AlmaLinux:10 | php-enchant | 8.3.31-1.el10_2 | ALSA-2026:23388 |
| AlmaLinux:8 | php-enchant | 8.2.31-1.module_el8.10.0+4189+0784d4cc | ALSA-2026:22305 |
| AlmaLinux:8 | php-enchant | 7.4.33-4.module_el8.10.0+4209+2ed16ff0 | ALSA-2026:34354 |
| AlmaLinux:9 | php-enchant | 8.0.30-6.el9_8 | ALSA-2026:33449 |
| AlmaLinux:9 | php-enchant | 8.3.31-2.module_el9.8.0+255+747189f2 | ALSA-2026:22142 |
| AlmaLinux:9 | php-enchant | 8.2.31-1.module_el9.8.0+254+5708f44c | ALSA-2026:22143 |
| AlmaLinux:10 | php-ffi | 8.3.31-1.el10_2 | ALSA-2026:23388 |
| AlmaLinux:8 | php-ffi | 8.2.31-1.module_el8.10.0+4189+0784d4cc | ALSA-2026:22305 |
| AlmaLinux:8 | php-ffi | 7.4.33-4.module_el8.10.0+4209+2ed16ff0 | ALSA-2026:34354 |
| AlmaLinux:9 | php-ffi | 8.3.31-2.module_el9.8.0+255+747189f2 | ALSA-2026:22142 |
| AlmaLinux:9 | php-ffi | 8.0.30-6.el9_8 | ALSA-2026:33449 |
| AlmaLinux:9 | php-ffi | 8.2.31-1.module_el9.8.0+254+5708f44c | ALSA-2026:22143 |
| AlmaLinux:10 | php-fpm | 8.3.31-1.el10_2 | ALSA-2026:23388 |
| AlmaLinux:8 | php-fpm | 7.4.33-4.module_el8.10.0+4209+2ed16ff0 | ALSA-2026:34354 |
| AlmaLinux:8 | php-fpm | 8.2.31-1.module_el8.10.0+4189+0784d4cc | ALSA-2026:22305 |
| AlmaLinux:9 | php-fpm | 8.2.31-1.module_el9.8.0+254+5708f44c | ALSA-2026:22143 |
| AlmaLinux:9 | php-fpm | 8.3.31-2.module_el9.8.0+255+747189f2 | ALSA-2026:22142 |
| AlmaLinux:9 | php-fpm | 8.0.30-6.el9_8 | ALSA-2026:33449 |
| AlmaLinux:10 | php-gd | 8.3.31-1.el10_2 | ALSA-2026:23388 |
| AlmaLinux:8 | php-gd | 8.2.31-1.module_el8.10.0+4189+0784d4cc | ALSA-2026:22305 |
| AlmaLinux:8 | php-gd | 7.4.33-4.module_el8.10.0+4209+2ed16ff0 | ALSA-2026:34354 |
| AlmaLinux:9 | php-gd | 8.0.30-6.el9_8 | ALSA-2026:33449 |
| AlmaLinux:9 | php-gd | 8.3.31-2.module_el9.8.0+255+747189f2 | ALSA-2026:22142 |
| AlmaLinux:9 | php-gd | 8.2.31-1.module_el9.8.0+254+5708f44c | ALSA-2026:22143 |
| AlmaLinux:10 | php-gmp | 8.3.31-1.el10_2 | ALSA-2026:23388 |
| AlmaLinux:8 | php-gmp | 8.2.31-1.module_el8.10.0+4189+0784d4cc | ALSA-2026:22305 |
| AlmaLinux:8 | php-gmp | 7.4.33-4.module_el8.10.0+4209+2ed16ff0 | ALSA-2026:34354 |
| AlmaLinux:9 | php-gmp | 8.3.31-2.module_el9.8.0+255+747189f2 | ALSA-2026:22142 |
| AlmaLinux:9 | php-gmp | 8.2.31-1.module_el9.8.0+254+5708f44c | ALSA-2026:22143 |
| AlmaLinux:9 | php-gmp | 8.0.30-6.el9_8 | ALSA-2026:33449 |
| AlmaLinux:10 | php-intl | 8.3.31-1.el10_2 | ALSA-2026:23388 |
| AlmaLinux:8 | php-intl | 8.2.31-1.module_el8.10.0+4189+0784d4cc | ALSA-2026:22305 |
| AlmaLinux:8 | php-intl | 7.4.33-4.module_el8.10.0+4209+2ed16ff0 | ALSA-2026:34354 |
| AlmaLinux:9 | php-intl | 8.3.31-2.module_el9.8.0+255+747189f2 | ALSA-2026:22142 |
| AlmaLinux:9 | php-intl | 8.0.30-6.el9_8 | ALSA-2026:33449 |
| AlmaLinux:9 | php-intl | 8.2.31-1.module_el9.8.0+254+5708f44c | ALSA-2026:22143 |
| AlmaLinux:8 | php-json | 7.4.33-4.module_el8.10.0+4209+2ed16ff0 | ALSA-2026:34354 |
| AlmaLinux:10 | php-ldap | 8.3.31-1.el10_2 | ALSA-2026:23388 |
| AlmaLinux:8 | php-ldap | 7.4.33-4.module_el8.10.0+4209+2ed16ff0 | ALSA-2026:34354 |
| AlmaLinux:8 | php-ldap | 8.2.31-1.module_el8.10.0+4189+0784d4cc | ALSA-2026:22305 |
| AlmaLinux:9 | php-ldap | 8.2.31-1.module_el9.8.0+254+5708f44c | ALSA-2026:22143 |
| AlmaLinux:9 | php-ldap | 8.0.30-6.el9_8 | ALSA-2026:33449 |
| AlmaLinux:9 | php-ldap | 8.3.31-2.module_el9.8.0+255+747189f2 | ALSA-2026:22142 |
| AlmaLinux:10 | php-mbstring | 8.3.31-1.el10_2 | ALSA-2026:23388 |
| AlmaLinux:8 | php-mbstring | 8.2.31-1.module_el8.10.0+4189+0784d4cc | ALSA-2026:22305 |
| AlmaLinux:8 | php-mbstring | 7.4.33-4.module_el8.10.0+4209+2ed16ff0 | ALSA-2026:34354 |
| AlmaLinux:9 | php-mbstring | 8.2.31-1.module_el9.8.0+254+5708f44c | ALSA-2026:22143 |
| AlmaLinux:9 | php-mbstring | 8.3.31-2.module_el9.8.0+255+747189f2 | ALSA-2026:22142 |
| AlmaLinux:9 | php-mbstring | 8.0.30-6.el9_8 | ALSA-2026:33449 |
| AlmaLinux:10 | php-mysqlnd | 8.3.31-1.el10_2 | ALSA-2026:23388 |
| AlmaLinux:8 | php-mysqlnd | 7.4.33-4.module_el8.10.0+4209+2ed16ff0 | ALSA-2026:34354 |
| AlmaLinux:8 | php-mysqlnd | 8.2.31-1.module_el8.10.0+4189+0784d4cc | ALSA-2026:22305 |
| AlmaLinux:9 | php-mysqlnd | 8.3.31-2.module_el9.8.0+255+747189f2 | ALSA-2026:22142 |
| AlmaLinux:9 | php-mysqlnd | 8.2.31-1.module_el9.8.0+254+5708f44c | ALSA-2026:22143 |
| AlmaLinux:9 | php-mysqlnd | 8.0.30-6.el9_8 | ALSA-2026:33449 |
| AlmaLinux:10 | php-odbc | 8.3.31-1.el10_2 | ALSA-2026:23388 |
| AlmaLinux:8 | php-odbc | 7.4.33-4.module_el8.10.0+4209+2ed16ff0 | ALSA-2026:34354 |
| AlmaLinux:8 | php-odbc | 8.2.31-1.module_el8.10.0+4189+0784d4cc | ALSA-2026:22305 |
| AlmaLinux:9 | php-odbc | 8.3.31-2.module_el9.8.0+255+747189f2 | ALSA-2026:22142 |
| AlmaLinux:9 | php-odbc | 8.0.30-6.el9_8 | ALSA-2026:33449 |
| AlmaLinux:9 | php-odbc | 8.2.31-1.module_el9.8.0+254+5708f44c | ALSA-2026:22143 |
| AlmaLinux:10 | php-opcache | 8.3.31-1.el10_2 | ALSA-2026:23388 |
| AlmaLinux:8 | php-opcache | 7.4.33-4.module_el8.10.0+4209+2ed16ff0 | ALSA-2026:34354 |
| AlmaLinux:8 | php-opcache | 8.2.31-1.module_el8.10.0+4189+0784d4cc | ALSA-2026:22305 |
| AlmaLinux:9 | php-opcache | 8.0.30-6.el9_8 | ALSA-2026:33449 |
| AlmaLinux:9 | php-opcache | 8.3.31-2.module_el9.8.0+255+747189f2 | ALSA-2026:22142 |
| AlmaLinux:9 | php-opcache | 8.2.31-1.module_el9.8.0+254+5708f44c | ALSA-2026:22143 |
| AlmaLinux:10 | php-pdo | 8.3.31-1.el10_2 | ALSA-2026:23388 |
| AlmaLinux:8 | php-pdo | 7.4.33-4.module_el8.10.0+4209+2ed16ff0 | ALSA-2026:34354 |
| AlmaLinux:8 | php-pdo | 8.2.31-1.module_el8.10.0+4189+0784d4cc | ALSA-2026:22305 |
| AlmaLinux:9 | php-pdo | 8.3.31-2.module_el9.8.0+255+747189f2 | ALSA-2026:22142 |
| AlmaLinux:9 | php-pdo | 8.0.30-6.el9_8 | ALSA-2026:33449 |
| AlmaLinux:9 | php-pdo | 8.2.31-1.module_el9.8.0+254+5708f44c | ALSA-2026:22143 |
| AlmaLinux:8 | php-pear | 1:1.10.14-1.module_el8.10.0+3796+30ed3ef7 | ALSA-2026:22305 |
| AlmaLinux:8 | php-pear | 1:1.10.13-1.module_el8.10.0+3935+28808425 | ALSA-2026:34354 |
| AlmaLinux:8 | php-pecl-apcu | 5.1.18-1.module_el8.10.0+3935+28808425 | ALSA-2026:34354 |
| AlmaLinux:8 | php-pecl-apcu | 5.1.23-1.module_el8.10.0+3796+30ed3ef7 | ALSA-2026:22305 |
| AlmaLinux:8 | php-pecl-apcu | 5.1.18-1.module_el8.6.0+2750+78feabcb | ALSA-2026:34354 |
| AlmaLinux:9 | php-pecl-apcu | 5.1.23-1.module_el9.4.0+65+49ff6472 | ALSA-2026:22143 |
| AlmaLinux:9 | php-pecl-apcu | 5.1.23-1.module_el9.6.0+151+5f31e576 | ALSA-2026:22142 |
| AlmaLinux:8 | php-pecl-apcu-devel | 5.1.18-1.module_el8.10.0+3935+28808425 | ALSA-2026:34354 |
| AlmaLinux:8 | php-pecl-apcu-devel | 5.1.18-1.module_el8.6.0+2750+78feabcb | ALSA-2026:34354 |
| AlmaLinux:8 | php-pecl-apcu-devel | 5.1.23-1.module_el8.10.0+3796+30ed3ef7 | ALSA-2026:22305 |
| AlmaLinux:9 | php-pecl-apcu-devel | 5.1.23-1.module_el9.6.0+151+5f31e576 | ALSA-2026:22142 |
| AlmaLinux:9 | php-pecl-apcu-devel | 5.1.23-1.module_el9.4.0+65+49ff6472 | ALSA-2026:22143 |
| AlmaLinux:9 | php-pecl-redis6 | 6.1.0-2.module_el9.6.0+151+5f31e576 | ALSA-2026:22142 |
| AlmaLinux:8 | php-pecl-rrd | 2.0.1-1.module_el8.10.0+3935+28808425 | ALSA-2026:34354 |
| AlmaLinux:8 | php-pecl-rrd | 2.0.1-1.module_el8.6.0+3239+bedf0508 | ALSA-2026:34354 |
| AlmaLinux:8 | php-pecl-rrd | 2.0.3-1.module_el8.10.0+3796+30ed3ef7 | ALSA-2026:22305 |
| AlmaLinux:8 | php-pecl-rrd | 2.0.1-1.module_el8.6.0+2750+78feabcb | ALSA-2026:34354 |
| AlmaLinux:9 | php-pecl-rrd | 2.0.3-4.module_el9.6.0+151+5f31e576 | ALSA-2026:22142 |
| AlmaLinux:9 | php-pecl-rrd | 2.0.3-4.module_el9.4.0+65+49ff6472 | ALSA-2026:22143 |
| AlmaLinux:8 | php-pecl-xdebug | 2.9.5-1.module_el8.10.0+3935+28808425 | ALSA-2026:34354 |
| AlmaLinux:8 | php-pecl-xdebug | 2.9.5-1.module_el8.6.0+3239+bedf0508 | ALSA-2026:34354 |
| AlmaLinux:8 | php-pecl-xdebug | 2.9.5-1.module_el8.6.0+2750+78feabcb | ALSA-2026:34354 |
| AlmaLinux:8 | php-pecl-xdebug3 | 3.2.2-2.module_el8.10.0+3796+30ed3ef7 | ALSA-2026:22305 |
| AlmaLinux:9 | php-pecl-xdebug3 | 3.2.2-2.module_el9.4.0+65+49ff6472 | ALSA-2026:22143 |
| AlmaLinux:9 | php-pecl-xdebug3 | 3.3.1-1.module_el9.6.0+151+5f31e576 | ALSA-2026:22142 |
| AlmaLinux:8 | php-pecl-zip | 1.18.2-1.module_el8.10.0+3935+28808425 | ALSA-2026:34354 |
| AlmaLinux:8 | php-pecl-zip | 1.22.3-1.module_el8.10.0+3796+30ed3ef7 | ALSA-2026:22305 |
| AlmaLinux:8 | php-pecl-zip | 1.18.2-1.module_el8.6.0+2750+78feabcb | ALSA-2026:34354 |
| AlmaLinux:8 | php-pecl-zip | 1.18.2-1.module_el8.6.0+3239+bedf0508 | ALSA-2026:34354 |
| AlmaLinux:9 | php-pecl-zip | 1.22.3-1.module_el9.4.0+65+49ff6472 | ALSA-2026:22143 |
| AlmaLinux:9 | php-pecl-zip | 1.22.3-1.module_el9.6.0+151+5f31e576 | ALSA-2026:22142 |
| AlmaLinux:10 | php-pgsql | 8.3.31-1.el10_2 | ALSA-2026:23388 |
| AlmaLinux:8 | php-pgsql | 7.4.33-4.module_el8.10.0+4209+2ed16ff0 | ALSA-2026:34354 |
| AlmaLinux:8 | php-pgsql | 8.2.31-1.module_el8.10.0+4189+0784d4cc | ALSA-2026:22305 |
| AlmaLinux:9 | php-pgsql | 8.0.30-6.el9_8 | ALSA-2026:33449 |
| AlmaLinux:9 | php-pgsql | 8.3.31-2.module_el9.8.0+255+747189f2 | ALSA-2026:22142 |
| AlmaLinux:9 | php-pgsql | 8.2.31-1.module_el9.8.0+254+5708f44c | ALSA-2026:22143 |
| AlmaLinux:10 | php-process | 8.3.31-1.el10_2 | ALSA-2026:23388 |
| AlmaLinux:8 | php-process | 8.2.31-1.module_el8.10.0+4189+0784d4cc | ALSA-2026:22305 |
| AlmaLinux:8 | php-process | 7.4.33-4.module_el8.10.0+4209+2ed16ff0 | ALSA-2026:34354 |
| AlmaLinux:9 | php-process | 8.0.30-6.el9_8 | ALSA-2026:33449 |
| AlmaLinux:9 | php-process | 8.3.31-2.module_el9.8.0+255+747189f2 | ALSA-2026:22142 |
| AlmaLinux:9 | php-process | 8.2.31-1.module_el9.8.0+254+5708f44c | ALSA-2026:22143 |
| AlmaLinux:10 | php-snmp | 8.3.31-1.el10_2 | ALSA-2026:23388 |
| AlmaLinux:8 | php-snmp | 7.4.33-4.module_el8.10.0+4209+2ed16ff0 | ALSA-2026:34354 |
| AlmaLinux:8 | php-snmp | 8.2.31-1.module_el8.10.0+4189+0784d4cc | ALSA-2026:22305 |
| AlmaLinux:9 | php-snmp | 8.3.31-2.module_el9.8.0+255+747189f2 | ALSA-2026:22142 |
| AlmaLinux:9 | php-snmp | 8.0.30-6.el9_8 | ALSA-2026:33449 |
| AlmaLinux:9 | php-snmp | 8.2.31-1.module_el9.8.0+254+5708f44c | ALSA-2026:22143 |
| AlmaLinux:10 | php-soap | 8.3.31-1.el10_2 | ALSA-2026:23388 |
| AlmaLinux:8 | php-soap | 8.2.31-1.module_el8.10.0+4189+0784d4cc | ALSA-2026:22305 |
| AlmaLinux:8 | php-soap | 7.4.33-4.module_el8.10.0+4209+2ed16ff0 | ALSA-2026:34354 |
| AlmaLinux:9 | php-soap | 8.3.31-2.module_el9.8.0+255+747189f2 | ALSA-2026:22142 |
| AlmaLinux:9 | php-soap | 8.2.31-1.module_el9.8.0+254+5708f44c | ALSA-2026:22143 |
| AlmaLinux:9 | php-soap | 8.0.30-6.el9_8 | ALSA-2026:33449 |
| AlmaLinux:10 | php-xml | 8.3.31-1.el10_2 | ALSA-2026:23388 |
| AlmaLinux:8 | php-xml | 7.4.33-4.module_el8.10.0+4209+2ed16ff0 | ALSA-2026:34354 |
| AlmaLinux:8 | php-xml | 8.2.31-1.module_el8.10.0+4189+0784d4cc | ALSA-2026:22305 |
| AlmaLinux:9 | php-xml | 8.2.31-1.module_el9.8.0+254+5708f44c | ALSA-2026:22143 |
| AlmaLinux:9 | php-xml | 8.3.31-2.module_el9.8.0+255+747189f2 | ALSA-2026:22142 |
| AlmaLinux:9 | php-xml | 8.0.30-6.el9_8 | ALSA-2026:33449 |
| AlmaLinux:8 | php-xmlrpc | 7.4.33-4.module_el8.10.0+4209+2ed16ff0 | ALSA-2026:34354 |
| AlmaLinux:10 | php8.4 | 8.4.21-1.el10_2 | ALSA-2026:22649 |
| AlmaLinux:10 | php8.4-bcmath | 8.4.21-1.el10_2 | ALSA-2026:22649 |
Affected products (as reported)
Weakness: CWE-416, CWE-825 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L
References
- https://github.com/php/php-src/security/advisories/GHSA-85c2-q967-79q5 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2026-6722 vdb-entry, x_refsource_REDHAT
- RHBZ#2468560 issue-tracking, x_refsource_REDHAT
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6722.json x_sadp-csaf-vex
- https://access.redhat.com/errata/RHSA-2026:23388 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:22649 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:34354 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:22305 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:22142 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:22143 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:33449 vendor-advisory, x_refsource_REDHAT