PHP

Products

Exploited and recent CVEs

• CVE-2019-11043 High 8.7 Exploited Underflow in PHP-FPM can lead to RCE 99.8%
• CVE-2026-122233 Low 3.7 FrankenPHP before 1.13.4 Cross-Request Response Header Leak in Worker Mode 0.2%
• CVE-2026-85733 Medium 5.3 FrankenPHP: Docker images serve phpinfo() as the default index.php, leaking environment variables 0.2%
• CVE-2026-82416 High 7.7 FrankenPHP: Cross-request PHP session ID leak in worker mode when the session extension is a shared module 0.3%
• CVE-2026-14355 Medium 5.6 ext/openssl: Memory corruption in openssl_encrypt with AES-WRAP-PAD 0.3%
• CVE-2026-45062 High 8.1 FrankenPHP: Unsafe Unicode Handling in CGI Path Splitting Allows Execution of Non-PHP Files 0.7%
• CVE-2026-24895 High 8.9 FrankenPHP affected by Path Confusion via Unicode casing in CGI path splitting allows execution of arbitrary files 0.7%
• CVE-2026-24894 High 8.7 FrankenPHP leaks session data between requests in worker mode 0.5%