Every CVE Search/ Get API key

CVE-2026-17544

Out-of-bounds write in bccomp() via crafted operand and scale

8.1 HighPublic exploitFix available

Attacker-provided inputs to bccomp() could lead to an out-of-bounds write with stack and heap corruption in PHP versions from 8.4.* before 8.4.24 and from 8.5.* before 8.5.9.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.42%Unchanged since Jul 31, 2026
90%50%10%1%

What each source reports

CVE List Score used 8.1

Out-of-bounds write in bccomp() via crafted operand and scale

Attacker-provided inputs to bccomp() could lead to an out-of-bounds write with stack and heap corruption in PHP versions from 8.4.* before 8.4.24 and from 8.5.* before 8.5.9.

Record
CVE-2026-17544
CVSS 4.0
8.1 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N
Weakness
CWE-787
Updated
2026-11-02
EUVDEUVD-2026-51091 8.1

Attacker-provided inputs to bccomp() could lead to an out-of-bounds write with stack and heap corruption in PHP versions from 8.4.* before 8.4.24 and from 8.5.* before 8.5.9.

Record
EUVD-2026-51091
CVSS 4.0
8.1 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N
Updated
2026-11-02
NVD 8.1

Attacker-provided inputs to bccomp() could lead to an out-of-bounds write with stack and heap corruption in PHP versions from 8.4.* before 8.4.24 and from 8.5.* before 8.5.9.

Record
CVE-2026-17544
CVSS 4.0
8.1 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:X/V:X/RE:X/U:X
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-787
Updated
2026-11-02
OSVALPINE-CVE-2026-17544 9.8

Attacker-provided inputs to bccomp() could lead to an out-of-bounds write with stack and heap corruption in PHP versions from 8.4.* before 8.4.24 and from 8.5.* before 8.5.9.

Record
ALPINE-CVE-2026-17544
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
OSVBELL-CVE-2026-17544 9.8

CVE-2026-17544 does not affect BellSoft software

Record
BELL-CVE-2026-17544
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2026-17544 9.8

Attacker-provided inputs to bccomp() could lead to an out-of-bounds write with stack and heap corruption in PHP versions from 8.4.* before 8.4.24 and from 8.5.* before 8.5.9.

Record
DEBIAN-CVE-2026-17544
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 16 moreShow less
OSVRHSA-2026:47200 8.1

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:47200
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:56969 8.1

Red Hat Security Advisory: php8.4 security, bug fix, and enhancement update

Record
RHSA-2026:56969
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:56969 8.1

Important: php8.4 security, bug fix, and enhancement update

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is fairly simple. The most common use of PHP coding is probably as a replacement for CGI scripts.

Security Fix(es):

  • php: ext-pgsql: PHP: SQL injection via improper backslash escaping (CVE-2026-17543)

  • php: PHP: Arbitrary code execution via out-of-bounds write in bccomp() (CVE-2026-17544)

Bug Fix(es) and Enhancement(s):

  • Rebase PHP to 8.4.24 for CVE-2026-17543 and CVE-2026-7260 and CVE-2026-17544 in 10.2.z (JIRA:Rocky Linux-223949)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:56969
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-17544 8.1

Attacker-provided inputs to bccomp() could lead to an out-of-bounds write with stack and heap corruption in PHP versions from 8.4.* before 8.4.24 and from 8.5.* before 8.5.9.

Record
UBUNTU-CVE-2026-17544
CVSS 4.0
8.1 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2026:56969 No score

Important: php8.4 security, bug fix, and enhancement update

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is fairly simple. The most common use of PHP coding is probably as a replacement for CGI scripts.

Security Fix(es):

  • php: ext-pgsql: PHP: SQL injection via improper backslash escaping (CVE-2026-17543)
  • php: PHP: Arbitrary code execution via out-of-bounds write in bccomp() (CVE-2026-17544)

Bug Fix(es) and Enhancement(s):

  • Rebase PHP to 8.4.24 for CVE-2026-17543 and CVE-2026-7260 and CVE-2026-17544 in 10.2.z (JIRA:AlmaLinux-223949)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:56969
Updated
2026-11-02
OSVBIT-libphp-2026-17544 No score

Out-of-bounds write in bccomp() via crafted operand and scale

Attacker-provided inputs to bccomp() could lead to an out-of-bounds write with stack and heap corruption in PHP versions from 8.4.* before 8.4.24 and from 8.5.* before 8.5.9.

Record
BIT-libphp-2026-17544
Updated
2026-11-02
OSVBIT-php-2026-17544 No score

Out-of-bounds write in bccomp() via crafted operand and scale

Attacker-provided inputs to bccomp() could lead to an out-of-bounds write with stack and heap corruption in PHP versions from 8.4.* before 8.4.24 and from 8.5.* before 8.5.9.

Record
BIT-php-2026-17544
Updated
2026-11-02
OSVBIT-php-min-2026-17544 No score

Out-of-bounds write in bccomp() via crafted operand and scale

Attacker-provided inputs to bccomp() could lead to an out-of-bounds write with stack and heap corruption in PHP versions from 8.4.* before 8.4.24 and from 8.5.* before 8.5.9.

Record
BIT-php-min-2026-17544
Updated
2026-11-02
OSVMGASA-2026-0329 No score

Updated php8.4 packages fix security vulnerabilities

The updated php 8.4 packages fix some security vulnerabilities. See the references for more information.

Record
MGASA-2026-0329
Updated
2026-11-02
OSVMGASA-2026-0330 No score

Updated php8.5 packages fix security vulnerabilities

Updated php 8.5 packages fix some security vulnerabilities. For details see the references.

Record
MGASA-2026-0330
Updated
2026-11-02
OSVopenSUSE-SU-2026:11418-1 No score

php8-8.5.9-1.1 on GA media

These are all security issues fixed in the php8-8.5.9-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:11418-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:21532-1 No score

Security update for php8

This update for php8 fixes the following issues

  • Update to version 8.4.24
  • CVE-2026-7260: Stack overflow in phar with circular symlinks (bsc#1273077).
  • CVE-2026-9672: Upgrade libgd (bsc#1273078).
  • CVE-2026-17543: SQL injection in ext-pgsql via E'...' backslash breakout (bsc#1273075).
  • CVE-2026-17544: Out-of-bounds write in bccomp() via crafted operand and scale (bsc#1273076).
Record
openSUSE-SU-2026:21532-1
Updated
2026-11-02
OSVSUSE-SU-2026:23121-1 No score

Security update for php8

This update for php8 fixes the following issues

  • Update to version 8.4.24
  • CVE-2026-7260: Stack overflow in phar with circular symlinks (bsc#1273077).
  • CVE-2026-9672: Upgrade libgd (bsc#1273078).
  • CVE-2026-17543: SQL injection in ext-pgsql via E'...' backslash breakout (bsc#1273075).
  • CVE-2026-17544: Out-of-bounds write in bccomp() via crafted operand and scale (bsc#1273076).
Record
SUSE-SU-2026:23121-1
Updated
2026-11-02
OSVSUSE-SU-2026:23144-1 No score

Security update for php8

This update for php8 fixes the following issues

  • Update to version 8.4.24
  • CVE-2026-7260: Stack overflow in phar with circular symlinks (bsc#1273077).
  • CVE-2026-9672: Upgrade libgd (bsc#1273078).
  • CVE-2026-17543: SQL injection in ext-pgsql via E'...' backslash breakout (bsc#1273075).
  • CVE-2026-17544: Out-of-bounds write in bccomp() via crafted operand and scale (bsc#1273076).
Record
SUSE-SU-2026:23144-1
Updated
2026-11-02
OSVSUSE-SU-2026:3509-1 No score

Security update for php8

This update for php8 fixes the following issues:

Update to version 8.3.33.

Security issues fixed:

  • CVE-2026-7260: circular symbolic links in phar archives can lead to unbounded recursion and cause C stack exhaustion (bsc#1273077).
  • CVE-2026-9672: security issues in libgd (bsc#1273078).
  • CVE-2026-17543: improper escaping of backslashes in user-provided parameters allows for trivial SQL injection in ext-pgsql (bsc#1273075).
  • CVE-2026-17544: php: Out-of-bounds write in bccomp() via crafted operand and scale (bsc#1273076)
Record
SUSE-SU-2026:3509-1
Updated
2026-11-04
OSVUSN-8743-1 No score

php8.1, php8.3, php8.5 vulnerabilities

It was discovered that PHP incorrectly handled backslash escaping in the PostgreSQL extension. An attacker could use this issue to perform SQL injection attacks. (CVE-2026-17543)

It was discovered that PHP incorrectly handled certain inputs to the bccomp() function. An attacker could use this issue to cause an out-of- bounds write, resulting in a denial of service or possibly execute arbitrary code. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-17544)

It was discovered that PHP incorrectly handled circular symbolic links in phar archives. An attacker could use this issue to cause unbounded recursion, resulting in a denial of service. (CVE-2026-7260)

Record
USN-8743-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
php84
Alpine:v3.22
 before 8.4.27-r0
8.4.27-r0
php84
Alpine:v3.23
 before 8.4.27-r0
8.4.27-r0
php84
Alpine:v3.24
 before 8.4.24-r0
8.4.24-r0
php85
Alpine:v3.23
 before 8.5.12-r0
8.5.12-r0
php85
Alpine:v3.24
 before 8.5.9-r0
8.5.9-r0
php8.4
AlmaLinux:10
From an advisory covering 3 CVEs
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-bcmath
AlmaLinux:10
From an advisory covering 3 CVEs
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-cli
AlmaLinux:10
From an advisory covering 3 CVEs
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-common
AlmaLinux:10
From an advisory covering 3 CVEs
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-dba
AlmaLinux:10
From an advisory covering 3 CVEs
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
Show 133 moreShow less
Affected packages
PackageAffectedFixed
php8.4-dbg
AlmaLinux:10
From an advisory covering 3 CVEs
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-devel
AlmaLinux:10
From an advisory covering 3 CVEs
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-embedded
AlmaLinux:10
From an advisory covering 3 CVEs
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-enchant
AlmaLinux:10
From an advisory covering 3 CVEs
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-ffi
AlmaLinux:10
From an advisory covering 3 CVEs
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-fpm
AlmaLinux:10
From an advisory covering 3 CVEs
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-gd
AlmaLinux:10
From an advisory covering 3 CVEs
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-gmp
AlmaLinux:10
From an advisory covering 3 CVEs
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-intl
AlmaLinux:10
From an advisory covering 3 CVEs
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-ldap
AlmaLinux:10
From an advisory covering 3 CVEs
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-mbstring
AlmaLinux:10
From an advisory covering 3 CVEs
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-mysqlnd
AlmaLinux:10
From an advisory covering 3 CVEs
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-odbc
AlmaLinux:10
From an advisory covering 3 CVEs
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-opcache
AlmaLinux:10
From an advisory covering 3 CVEs
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-pdo
AlmaLinux:10
From an advisory covering 3 CVEs
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-pgsql
AlmaLinux:10
From an advisory covering 3 CVEs
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-process
AlmaLinux:10
From an advisory covering 3 CVEs
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-snmp
AlmaLinux:10
From an advisory covering 3 CVEs
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-soap
AlmaLinux:10
From an advisory covering 3 CVEs
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
php8.4-xml
AlmaLinux:10
From an advisory covering 3 CVEs
 before 8.4.24-1.el10_2
8.4.24-1.el10_2
libphp
Bitnami
 8.4.0 up to 8.4.24, 8.5.0 up to 8.5.9
8.4.248.5.9
php
Bitnami
 8.4.0 up to 8.4.24, 8.5.0 up to 8.5.9
8.4.248.5.9
php-min
Bitnami
 8.4.0 up to 8.4.24, 8.5.0 up to 8.5.9
8.4.248.5.9
php8.4
Debian:13
 before 8.4.24-1~deb13u1, plus listed versions
8.4.11-18.4.16-18.4.16-1~deb13u18.4.20-18.4.21-1
Show 4 moreShow less
8.4.21-1~deb13u18.4.22-18.4.23-18.4.23-1~deb13u1
8.4.24-1~deb13u1
php8.4
Debian:14
 before 8.4.24-1, plus listed versions
8.4.11-18.4.16-18.4.16-1~deb13u18.4.20-18.4.21-1
Show 5 moreShow less
8.4.21-1~deb13u18.4.22-18.4.23-18.4.23-1~deb13u18.4.24-1~deb13u1
8.4.24-1
php8.4
Mageia:10
From an advisory covering 4 CVEs
 before 8.4.24-1.1.mga10
8.4.24-1.1.mga10
php8.5
Mageia:10
From an advisory covering 4 CVEs
 before 8.5.9-1.mga10
8.5.9-1.mga10
php
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-bcmath
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-cli
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-common
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-dba
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-dbg
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-devel
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-embedded
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-enchant
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-ffi
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-fpm
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-gd
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-gmp
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-intl
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-ldap
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-mbstring
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-mysqlnd
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-odbc
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-pdo
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-pdo-dblib
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-pdo-firebird
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-pgsql
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-process
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-snmp
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-soap
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-sodium
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-tidy
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php-xml
Red Hat:hummingbird:1
From an advisory covering 4 CVEs
 before 0:8.5.9-1.hum1
0:8.5.9-1.hum1
php8.4
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-bcmath
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-bcmath-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-cli
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-cli-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-common
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-common-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-dba
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-dba-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-dbg
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-dbg-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-debugsource
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-devel
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-embedded
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-embedded-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-enchant
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-enchant-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-ffi
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-ffi-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-fpm
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-fpm-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-gd
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-gd-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-gmp
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-gmp-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-intl
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-intl-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-ldap
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-ldap-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-mbstring
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-mbstring-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-mysqlnd
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-mysqlnd-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-odbc
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-odbc-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-opcache
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-opcache-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-pdo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-pdo-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-pgsql
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-pgsql-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-process
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-process-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-snmp
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-snmp-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-soap
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-soap-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-xml
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4-xml-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
php8.4
Rocky Linux:10
From an advisory covering 2 CVEs
 before 0:8.4.24-1.el10_2
0:8.4.24-1.el10_2
apache2-mod_php8
SUSE:Linux Enterprise Server 16.0
From an advisory covering 4 CVEs
 before 8.4.24-160000.1.1
8.4.24-160000.1.1
php8
SUSE:Linux Enterprise Server 16.0
From an advisory covering 4 CVEs
 before 8.4.24-160000.1.1
8.4.24-160000.1.1
php8-embed
SUSE:Linux Enterprise Server 16.0
From an advisory covering 4 CVEs
 before 8.4.24-160000.1.1
8.4.24-160000.1.1
php8-fastcgi
SUSE:Linux Enterprise Server 16.0
From an advisory covering 4 CVEs
 before 8.4.24-160000.1.1
8.4.24-160000.1.1
php8-fpm
SUSE:Linux Enterprise Server 16.0
From an advisory covering 4 CVEs
 before 8.4.24-160000.1.1
8.4.24-160000.1.1
apache2-mod_php8
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 4 CVEs
 before 8.4.24-160000.1.1
8.4.24-160000.1.1
php8
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 4 CVEs
 before 8.4.24-160000.1.1
8.4.24-160000.1.1
php8-embed
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 4 CVEs
 before 8.4.24-160000.1.1
8.4.24-160000.1.1
php8-fastcgi
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 4 CVEs
 before 8.4.24-160000.1.1
8.4.24-160000.1.1
php8-fpm
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 4 CVEs
 before 8.4.24-160000.1.1
8.4.24-160000.1.1
apache2-mod_php8
SUSE:Linux Enterprise Module for Web and Scripting 15 SP7
From an advisory covering 4 CVEs
 before 8.3.33-150700.3.18.1
8.3.33-150700.3.18.1
php8
SUSE:Linux Enterprise Module for Web and Scripting 15 SP7
From an advisory covering 4 CVEs
 before 8.3.33-150700.3.18.1
8.3.33-150700.3.18.1
php8-embed
SUSE:Linux Enterprise Module for Web and Scripting 15 SP7
From an advisory covering 4 CVEs
 before 8.3.33-150700.3.18.1
8.3.33-150700.3.18.1
php8-fastcgi
SUSE:Linux Enterprise Module for Web and Scripting 15 SP7
From an advisory covering 4 CVEs
 before 8.3.33-150700.3.18.1
8.3.33-150700.3.18.1
php8-fpm
SUSE:Linux Enterprise Module for Web and Scripting 15 SP7
From an advisory covering 4 CVEs
 before 8.3.33-150700.3.18.1
8.3.33-150700.3.18.1
php8-test
SUSE:Linux Enterprise Module for Web and Scripting 15 SP7
From an advisory covering 4 CVEs
 before 8.3.33-150700.3.18.1
8.3.33-150700.3.18.1
php8.5
Ubuntu:26.04:LTS
 before 8.5.4-0ubuntu1.3, plus listed versions
8.5.2-0ubuntu18.5.4-0ubuntu18.5.4-0ubuntu1.18.5.4-0ubuntu1.2
8.5.4-0ubuntu1.3
php8.1
Ubuntu:22.04:LTS
From an advisory covering 3 CVEs
 before 8.1.2-1ubuntu2.26, plus listed versions
8.1.0~rc4-1ubuntu28.1.0-18.1.2-1ubuntu18.1.2-1ubuntu28.1.2-1ubuntu2.1
Show 21 moreShow less
8.1.2-1ubuntu2.28.1.2-1ubuntu2.38.1.2-1ubuntu2.48.1.2-1ubuntu2.58.1.2-1ubuntu2.68.1.2-1ubuntu2.88.1.2-1ubuntu2.98.1.2-1ubuntu2.108.1.2-1ubuntu2.118.1.2-1ubuntu2.138.1.2-1ubuntu2.148.1.2-1ubuntu2.158.1.2-1ubuntu2.178.1.2-1ubuntu2.188.1.2-1ubuntu2.198.1.2-1ubuntu2.208.1.2-1ubuntu2.218.1.2-1ubuntu2.228.1.2-1ubuntu2.238.1.2-1ubuntu2.248.1.2-1ubuntu2.25
8.1.2-1ubuntu2.26
php8.3
Ubuntu:24.04:LTS
From an advisory covering 3 CVEs
 before 8.3.6-0ubuntu0.24.04.11, plus listed versions
8.3.0-18.3.0-1ubuntu18.3.4-18.3.4-1build18.3.6-0maysync1
Show 10 moreShow less
8.3.6-0ubuntu0.24.04.18.3.6-0ubuntu0.24.04.28.3.6-0ubuntu0.24.04.38.3.6-0ubuntu0.24.04.48.3.6-0ubuntu0.24.04.58.3.6-0ubuntu0.24.04.68.3.6-0ubuntu0.24.04.78.3.6-0ubuntu0.24.04.88.3.6-0ubuntu0.24.04.98.3.6-0ubuntu0.24.04.10
8.3.6-0ubuntu0.24.04.11
php8.5
Ubuntu:26.04:LTS
From an advisory covering 3 CVEs
 before 8.5.4-0ubuntu1.3, plus listed versions
8.5.2-0ubuntu18.5.4-0ubuntu18.5.4-0ubuntu1.18.5.4-0ubuntu1.2
8.5.4-0ubuntu1.3
php8
openSUSE:Tumbleweed
From an advisory covering 4 CVEs
 before 8.5.9-1.1
8.5.9-1.1
apache2-mod_php8
openSUSE:Leap 16.0
From an advisory covering 4 CVEs
 before 8.4.24-160000.1.1
8.4.24-160000.1.1
php8
openSUSE:Leap 16.0
From an advisory covering 4 CVEs
 before 8.4.24-160000.1.1
8.4.24-160000.1.1
php8-embed
openSUSE:Leap 16.0
From an advisory covering 4 CVEs
 before 8.4.24-160000.1.1
8.4.24-160000.1.1
php8-fastcgi
openSUSE:Leap 16.0
From an advisory covering 4 CVEs
 before 8.4.24-160000.1.1
8.4.24-160000.1.1
php8-fpm
openSUSE:Leap 16.0
From an advisory covering 4 CVEs
 before 8.4.24-160000.1.1
8.4.24-160000.1.1
php8-test
openSUSE:Leap 16.0
From an advisory covering 4 CVEs
 before 8.4.24-160000.1.1
8.4.24-160000.1.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubBoreas37/CVE-2026-17544-PoC2026-08-12
PoC in GitHubr2qa/CVE-2026-175442026-08-15

History

History
RecordedChangedSources
affected
affected, aliases, facts, referencesOSV
affected, aliases, referencesOSV
first indexedCVE List, EUVD, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-17544 is a high vulnerability (CVSS 8.1) in Php, published July 30, 2026. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.42%, the 36th percentile. Fixed in php84 8.4.27-r0.

References

Show 48 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open