{"id":"CVE-2026-17545","aliases":["AZL-105141","BELL-CVE-2026-17545","BIT-libphp-2026-17545","BIT-php-2026-17545","BIT-php-min-2026-17545","EUVD-2026-87329","RHSA-2026:70720","UBUNTU-CVE-2026-17545","openSUSE-SU-2026:11901-1"],"status":"published","title":"PHP on Windows: Reserved Device Names Are Not Rejected Before File/Stream I/O which can cause DoS","description":"On Windows, PHP's filesystem and stream APIs do not reject reserved device names such as CON, PRN, AUX, NUL, COM1 to COM9, LPT1 to LPT9, CONIN$ and CONOUT$ when they appear as a component of a path. An attacker-controlled filename therefore reaches CreateFileW() and opens a device instead of the regular file the application expected, which can block or hang the request and exhaust worker processes.","severity":{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00368,"percentile":0.30868,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-67"],"published":"2026-09-25T20:18:11Z","modified":"2026-10-28T07:15:06Z","fixes":[{"ecosystem":"Bitnami","package":"libphp","fixed_in":["8.2.34","8.3.35","8.4.26","8.5.11"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"php","fixed_in":["8.2.34","8.3.35","8.4.26","8.5.11"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"php-min","fixed_in":["8.2.34","8.3.35","8.4.26","8.5.11"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:3","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"8.3.33-1"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"libphp","ranges":[{"type":"SEMVER","events":[{"introduced":"8.2.0"},{"fixed":"8.2.34"},{"introduced":"8.3.0"},{"fixed":"8.3.35"},{"introduced":"8.4.0"},{"fixed":"8.4.26"},{"introduced":"8.5.0"},{"fixed":"8.5.11"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"php","ranges":[{"type":"SEMVER","events":[{"introduced":"8.2.0"},{"fixed":"8.2.34"},{"introduced":"8.3.0"},{"fixed":"8.3.35"},{"introduced":"8.4.0"},{"fixed":"8.4.26"},{"introduced":"8.5.0"},{"fixed":"8.5.11"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"php-min","ranges":[{"type":"SEMVER","events":[{"introduced":"8.2.0"},{"fixed":"8.2.34"},{"introduced":"8.3.0"},{"fixed":"8.3.35"},{"introduced":"8.4.0"},{"fixed":"8.4.26"},{"introduced":"8.5.0"},{"fixed":"8.5.11"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.11-2.hum1"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.11-2.hum1"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.11-2.hum1"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.11-2.hum1"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.11-2.hum1"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"php-dbg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.11-2.hum1"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.11-2.hum1"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"php-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.11-2.hum1"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.11-2.hum1"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"php-ffi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.11-2.hum1"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.11-2.hum1"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.11-2.hum1"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"php-gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.11-2.hum1"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.11-2.hum1"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.11-2.hum1"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.11-2.hum1"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.11-2.hum1"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.11-2.hum1"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.11-2.hum1"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"php-pdo-dblib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.11-2.hum1"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"php-pdo-firebird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.11-2.hum1"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.11-2.hum1"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.11-2.hum1"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.11-2.hum1"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.11-2.hum1"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"php-sodium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.11-2.hum1"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"php-tidy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.11-2.hum1"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.11-2.hum1"}]}],"bundled":11},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.5.3+dfsg-1ubuntu2","5.5.3+dfsg-1ubuntu3","5.5.6+dfsg-1ubuntu1","5.5.6+dfsg-1ubuntu2","5.5.8+dfsg-2ubuntu1","5.5.9+dfsg-1ubuntu1","5.5.9+dfsg-1ubuntu2","5.5.9+dfsg-1ubuntu3","5.5.9+dfsg-1ubuntu4","5.5.9+dfsg-1ubuntu4.1","5.5.9+dfsg-1ubuntu4.2","5.5.9+dfsg-1ubuntu4.3","5.5.9+dfsg-1ubuntu4.4","5.5.9+dfsg-1ubuntu4.5","5.5.9+dfsg-1ubuntu4.6","5.5.9+dfsg-1ubuntu4.7","5.5.9+dfsg-1ubuntu4.9","5.5.9+dfsg-1ubuntu4.11","5.5.9+dfsg-1ubuntu4.12","5.5.9+dfsg-1ubuntu4.13","5.5.9+dfsg-1ubuntu4.14","5.5.9+dfsg-1ubuntu4.16","5.5.9+dfsg-1ubuntu4.17","5.5.9+dfsg-1ubuntu4.19","5.5.9+dfsg-1ubuntu4.20","5.5.9+dfsg-1ubuntu4.21","5.5.9+dfsg-1ubuntu4.22","5.5.9+dfsg-1ubuntu4.23","5.5.9+dfsg-1ubuntu4.24","5.5.9+dfsg-1ubuntu4.25","5.5.9+dfsg-1ubuntu4.26","5.5.9+dfsg-1ubuntu4.27","5.5.9+dfsg-1ubuntu4.29","5.5.9+dfsg-1ubuntu4.29+esm1","5.5.9+dfsg-1ubuntu4.29+esm2","5.5.9+dfsg-1ubuntu4.29+esm3","5.5.9+dfsg-1ubuntu4.29+esm4","5.5.9+dfsg-1ubuntu4.29+esm5","5.5.9+dfsg-1ubuntu4.29+esm6","5.5.9+dfsg-1ubuntu4.29+esm8","5.5.9+dfsg-1ubuntu4.29+esm10","5.5.9+dfsg-1ubuntu4.29+esm11","5.5.9+dfsg-1ubuntu4.29+esm12","5.5.9+dfsg-1ubuntu4.29+esm13","5.5.9+dfsg-1ubuntu4.29+esm14","5.5.9+dfsg-1ubuntu4.29+esm15","5.5.9+dfsg-1ubuntu4.29+esm16","5.5.9+dfsg-1ubuntu4.29+esm17","5.5.9+dfsg-1ubuntu4.29+esm18"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"php7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.0.1-5","7.0.1-6","7.0.2-1","7.0.2-3","7.0.2-4","7.0.2-5","7.0.3-2","7.0.3-3","7.0.3-9ubuntu1","7.0.4-5ubuntu1","7.0.4-5ubuntu2","7.0.4-7ubuntu1","7.0.4-7ubuntu2","7.0.4-7ubuntu2.1","7.0.8-0ubuntu0.16.04.1","7.0.8-0ubuntu0.16.04.2","7.0.8-0ubuntu0.16.04.3","7.0.13-0ubuntu0.16.04.1","7.0.15-0ubuntu0.16.04.1","7.0.15-0ubuntu0.16.04.2","7.0.15-0ubuntu0.16.04.4","7.0.18-0ubuntu0.16.04.1","7.0.22-0ubuntu0.16.04.1","7.0.25-0ubuntu0.16.04.1","7.0.28-0ubuntu0.16.04.1","7.0.30-0ubuntu0.16.04.1","7.0.32-0ubuntu0.16.04.1","7.0.33-0ubuntu0.16.04.1","7.0.33-0ubuntu0.16.04.2","7.0.33-0ubuntu0.16.04.3","7.0.33-0ubuntu0.16.04.4","7.0.33-0ubuntu0.16.04.5","7.0.33-0ubuntu0.16.04.6","7.0.33-0ubuntu0.16.04.7","7.0.33-0ubuntu0.16.04.9","7.0.33-0ubuntu0.16.04.11","7.0.33-0ubuntu0.16.04.12","7.0.33-0ubuntu0.16.04.14","7.0.33-0ubuntu0.16.04.15","7.0.33-0ubuntu0.16.04.16","7.0.33-0ubuntu0.16.04.16+esm1","7.0.33-0ubuntu0.16.04.16+esm2","7.0.33-0ubuntu0.16.04.16+esm3","7.0.33-0ubuntu0.16.04.16+esm4","7.0.33-0ubuntu0.16.04.16+esm5","7.0.33-0ubuntu0.16.04.16+esm6","7.0.33-0ubuntu0.16.04.16+esm7","7.0.33-0ubuntu0.16.04.16+esm8","7.0.33-0ubuntu0.16.04.16+esm9","7.0.33-0ubuntu0.16.04.16+esm10","7.0.33-0ubuntu0.16.04.16+esm11","7.0.33-0ubuntu0.16.04.16+esm12","7.0.33-0ubuntu0.16.04.16+esm13","7.0.33-0ubuntu0.16.04.16+esm14","7.0.33-0ubuntu0.16.04.16+esm15","7.0.33-0ubuntu0.16.04.16+esm16","7.0.33-0ubuntu0.16.04.16+esm17","7.0.33-0ubuntu0.16.04.16+esm18","7.0.33-0ubuntu0.16.04.16+esm19","7.0.33-0ubuntu0.16.04.16+esm20","7.0.33-0ubuntu0.16.04.16+esm21","7.0.33-0ubuntu0.16.04.16+esm22"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"php7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.2.1-1ubuntu2","7.2.2-1ubuntu1","7.2.2-1ubuntu2","7.2.3-1ubuntu1","7.2.5-0ubuntu0.18.04.1","7.2.7-0ubuntu0.18.04.1","7.2.7-0ubuntu0.18.04.2","7.2.10-0ubuntu0.18.04.1","7.2.15-0ubuntu0.18.04.1","7.2.15-0ubuntu0.18.04.2","7.2.17-0ubuntu0.18.04.1","7.2.19-0ubuntu0.18.04.1","7.2.19-0ubuntu0.18.04.2","7.2.24-0ubuntu0.18.04.1","7.2.24-0ubuntu0.18.04.2","7.2.24-0ubuntu0.18.04.3","7.2.24-0ubuntu0.18.04.4","7.2.24-0ubuntu0.18.04.6","7.2.24-0ubuntu0.18.04.7","7.2.24-0ubuntu0.18.04.8","7.2.24-0ubuntu0.18.04.9","7.2.24-0ubuntu0.18.04.10","7.2.24-0ubuntu0.18.04.11","7.2.24-0ubuntu0.18.04.12","7.2.24-0ubuntu0.18.04.13","7.2.24-0ubuntu0.18.04.15","7.2.24-0ubuntu0.18.04.16","7.2.24-0ubuntu0.18.04.17","7.2.24-0ubuntu0.18.04.17+esm1","7.2.24-0ubuntu0.18.04.17+esm2","7.2.24-0ubuntu0.18.04.17+esm3","7.2.24-0ubuntu0.18.04.17+esm4","7.2.24-0ubuntu0.18.04.17+esm5","7.2.24-0ubuntu0.18.04.17+esm6","7.2.24-0ubuntu0.18.04.17+esm7","7.2.24-0ubuntu0.18.04.17+esm8","7.2.24-0ubuntu0.18.04.17+esm9","7.2.24-0ubuntu0.18.04.17+esm10","7.2.24-0ubuntu0.18.04.17+esm11","7.2.24-0ubuntu0.18.04.17+esm12","7.2.24-0ubuntu0.18.04.17+esm13","7.2.24-0ubuntu0.18.04.17+esm14"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"php7.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.4.3-4build1","7.4.3-4build2","7.4.3-4ubuntu1","7.4.3-4ubuntu1.1","7.4.3-4ubuntu2.2","7.4.3-4ubuntu2.4","7.4.3-4ubuntu2.5","7.4.3-4ubuntu2.6","7.4.3-4ubuntu2.7","7.4.3-4ubuntu2.8","7.4.3-4ubuntu2.9","7.4.3-4ubuntu2.10","7.4.3-4ubuntu2.11","7.4.3-4ubuntu2.12","7.4.3-4ubuntu2.13","7.4.3-4ubuntu2.15","7.4.3-4ubuntu2.16","7.4.3-4ubuntu2.17","7.4.3-4ubuntu2.18","7.4.3-4ubuntu2.19","7.4.3-4ubuntu2.20","7.4.3-4ubuntu2.22","7.4.3-4ubuntu2.23","7.4.3-4ubuntu2.24","7.4.3-4ubuntu2.26","7.4.3-4ubuntu2.28","7.4.3-4ubuntu2.29","7.4.3-4ubuntu2.29+esm1","7.4.3-4ubuntu2.29+esm2","7.4.3-4ubuntu2.29+esm3","7.4.3-4ubuntu2.29+esm4","7.4.3-4ubuntu2.29+esm5"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"php8.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8.1.0~rc4-1ubuntu2","8.1.0-1","8.1.2-1ubuntu1","8.1.2-1ubuntu2","8.1.2-1ubuntu2.1","8.1.2-1ubuntu2.2","8.1.2-1ubuntu2.3","8.1.2-1ubuntu2.4","8.1.2-1ubuntu2.5","8.1.2-1ubuntu2.6","8.1.2-1ubuntu2.8","8.1.2-1ubuntu2.9","8.1.2-1ubuntu2.10","8.1.2-1ubuntu2.11","8.1.2-1ubuntu2.13","8.1.2-1ubuntu2.14","8.1.2-1ubuntu2.15","8.1.2-1ubuntu2.17","8.1.2-1ubuntu2.18","8.1.2-1ubuntu2.19","8.1.2-1ubuntu2.20","8.1.2-1ubuntu2.21","8.1.2-1ubuntu2.22","8.1.2-1ubuntu2.23","8.1.2-1ubuntu2.24","8.1.2-1ubuntu2.25","8.1.2-1ubuntu2.26","8.1.2-1ubuntu2.27","8.1.2-1ubuntu2.28"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"php8.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8.3.0-1","8.3.0-1ubuntu1","8.3.4-1","8.3.4-1build1","8.3.6-0maysync1","8.3.6-0ubuntu0.24.04.1","8.3.6-0ubuntu0.24.04.2","8.3.6-0ubuntu0.24.04.3","8.3.6-0ubuntu0.24.04.4","8.3.6-0ubuntu0.24.04.5","8.3.6-0ubuntu0.24.04.6","8.3.6-0ubuntu0.24.04.7","8.3.6-0ubuntu0.24.04.8","8.3.6-0ubuntu0.24.04.9","8.3.6-0ubuntu0.24.04.10","8.3.6-0ubuntu0.24.04.11","8.3.6-0ubuntu0.24.04.12","8.3.6-0ubuntu0.24.04.13"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"php8.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8.5.2-0ubuntu1","8.5.4-0ubuntu1","8.5.4-0ubuntu1.1","8.5.4-0ubuntu1.2","8.5.4-0ubuntu1.3","8.5.4-0ubuntu1.4","8.5.4-0ubuntu1.5"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"php8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.5.11-1.1"}]}],"bundled":11}],"products":[{"vendor":"php","product":"php"},{"vendor":"php group","product":"php"}],"references":[{"url":"https://github.com/php/php-src/security/advisories/GHSA-9f67-6fw4-hpfp","tags":["vendor-advisory","exploit","Vendor Advisory","Exploit","advisory","article","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-17545","tags":["web","advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-17545","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:70720","tags":["advisory"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-93682","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6103","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-91765","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-17545","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-91768","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-92842","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-91766","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-1218","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-91767","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-14181","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-91769","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_70720.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2541655","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-1218","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-1218","tags":["advisory"]},{"url":"https://github.com/php/php-src/security/advisories/GHSA-r6x9-5r99-36j7","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2541641","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-14181","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-14181","tags":["advisory"]},{"url":"https://github.com/php/php-src/security/advisories/GHSA-cj93-vc83-wgqv","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2541638","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6103","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6103","tags":["advisory"]},{"url":"https://github.com/php/php-src/security/advisories/GHSA-j3wh-g957-2m85","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2541645","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-17545","tags":["advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2541646","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-91765","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91765","tags":["advisory"]},{"url":"https://github.com/php/php-src/security/advisories/GHSA-rgrp-mwpx-f6rm","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2541649","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-91766","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91766","tags":["advisory"]},{"url":"https://github.com/php/php-src/security/advisories/GHSA-fpwc-w8rq-cr92","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2541652","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-91767","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91767","tags":["advisory"]},{"url":"https://github.com/php/php-src/security/advisories/GHSA-xr7j-rvgx-xq5p","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2541660","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-91768","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91768","tags":["advisory"]},{"url":"https://github.com/php/php-src/security/advisories/GHSA-62xp-839h-2637","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2542493","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-91769","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91769","tags":["advisory"]},{"url":"https://github.com/php/php-src/security/advisories/GHSA-vvx9-73fr-5jjx","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2541662","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-92842","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92842","tags":["advisory"]},{"url":"https://github.com/php/php-src/security/advisories/GHSA-88hq-2827-7pg6","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2541615","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-93682","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93682","tags":["advisory"]},{"url":"https://github.com/php/php-src/security/advisories/GHSA-7875-c8px-7q5f","tags":["article"]},{"url":"https://ubuntu.com/security/CVE-2026-17545","tags":["report"]},{"url":"https://github.com/php/php-src/blob/php-8.4.26/NEWS","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1218","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-14181","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17545","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6103","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91765","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91766","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91767","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91768","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-91769","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92842","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93682","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2026-17545","title":"PHP on Windows: Reserved Device Names Are Not Rejected Before File/Stream I/O which can cause DoS","description":"On Windows, PHP's filesystem and stream APIs do not reject reserved device names such as CON, PRN, AUX, NUL, COM1 to COM9, LPT1 to LPT9, CONIN$ and CONOUT$ when they appear as a component of a path. An attacker-controlled filename therefore reaches CreateFileW() and opens a device instead of the regular file the application expected, which can block or hang the request and exhaust worker processes.","status":"published","published":"2026-09-25T20:18:11.288Z","modified":"2026-09-25T20:43:34.157Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:H","level":"medium","assessor":"cna"}],"cwes":["CWE-67"],"updated_at":"2026-11-02T14:19:54.84674Z"}],"euvd":[{"id":"EUVD-2026-87329","description":"On Windows, PHP's filesystem and stream APIs do not reject reserved device names such as CON, PRN, AUX, NUL, COM1 to COM9, LPT1 to LPT9, CONIN$ and CONOUT$ when they appear as a component of a path. An attacker-controlled filename therefore reaches CreateFileW() and opens a device instead of the regular file the application expected, which can block or hang the request and exhaust worker processes.","status":"published","published":"2026-09-25T20:18:11Z","modified":"2026-09-25T20:43:34Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:H","level":"medium"}],"updated_at":"2026-11-02T17:27:54.622662Z"}],"nvd":[{"id":"CVE-2026-17545","description":"On Windows, PHP's filesystem and stream APIs do not reject reserved device names such as CON, PRN, AUX, NUL, COM1 to COM9, LPT1 to LPT9, CONIN$ and CONOUT$ when they appear as a component of a path. An attacker-controlled filename therefore reaches CreateFileW() and opens a device instead of the regular file the application expected, which can block or hang the request and exhaust worker processes.","status":"published","published":"2026-09-25T21:17:23.253Z","modified":"2026-10-23T14:43:15.817Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-67"],"updated_at":"2026-11-02T14:12:51.721923Z"}],"osv":[{"id":"BELL-CVE-2026-17545","title":"CVE-2026-17545 does not affect BellSoft software","status":"withdrawn","published":"2026-09-26T06:04:25.911416Z","modified":"2026-10-28T07:15:06.548369208Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:23.037038Z"},{"id":"RHSA-2026:70720","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-09-26T10:12:16Z","modified":"2026-10-15T10:25:29Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"UBUNTU-CVE-2026-17545","description":"On Windows, PHP's filesystem and stream APIs do not reject reserved device names such as CON, PRN, AUX, NUL, COM1 to COM9, LPT1 to LPT9, CONIN$ and CONOUT$ when they appear as a component of a path. An attacker-controlled filename therefore reaches CreateFileW() and opens a device instead of the regular file the application expected, which can block or hang the request and exhaust worker processes.","status":"published","published":"2026-09-25T21:17:00Z","modified":"2026-10-27T04:17:50.83897443Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:H","level":"medium"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:56:01.334185Z"},{"id":"AZL-105141","title":"CVE-2026-17545 affecting package php 8.3.33-1","description":"On Windows, PHP's filesystem and stream APIs do not reject reserved device names such as CON, PRN, AUX, NUL, COM1 to COM9, LPT1 to LPT9, CONIN$ and CONOUT$ when they appear as a component of a path. An attacker-controlled filename therefore reaches CreateFileW() and opens a device instead of the regular file the application expected, which can block or hang the request and exhaust worker processes.","status":"published","published":"2026-09-25T21:17:23Z","modified":"2026-10-15T05:37:09Z","updated_at":"2026-11-02T15:28:01.09948Z"},{"id":"BIT-libphp-2026-17545","title":"PHP on Windows: Reserved Device Names Are Not Rejected Before File/Stream I/O which can cause DoS","description":"On Windows, PHP's filesystem and stream APIs do not reject reserved device names such as CON, PRN, AUX, NUL, COM1 to COM9, LPT1 to LPT9, CONIN$ and CONOUT$ when they appear as a component of a path. An attacker-controlled filename therefore reaches CreateFileW() and opens a device instead of the regular file the application expected, which can block or hang the request and exhaust worker processes.","status":"published","published":"2026-10-01T09:29:09.411Z","modified":"2026-10-26T08:45:05.643313892Z","updated_at":"2026-11-02T15:28:32.162822Z"},{"id":"BIT-php-2026-17545","title":"PHP on Windows: Reserved Device Names Are Not Rejected Before File/Stream I/O which can cause DoS","description":"On Windows, PHP's filesystem and stream APIs do not reject reserved device names such as CON, PRN, AUX, NUL, COM1 to COM9, LPT1 to LPT9, CONIN$ and CONOUT$ when they appear as a component of a path. An attacker-controlled filename therefore reaches CreateFileW() and opens a device instead of the regular file the application expected, which can block or hang the request and exhaust worker processes.","status":"published","published":"2026-10-01T09:33:50.951Z","modified":"2026-10-26T08:45:05.58718821Z","updated_at":"2026-11-02T15:28:34.343258Z"},{"id":"BIT-php-min-2026-17545","title":"PHP on Windows: Reserved Device Names Are Not Rejected Before File/Stream I/O which can cause DoS","description":"On Windows, PHP's filesystem and stream APIs do not reject reserved device names such as CON, PRN, AUX, NUL, COM1 to COM9, LPT1 to LPT9, CONIN$ and CONOUT$ when they appear as a component of a path. An attacker-controlled filename therefore reaches CreateFileW() and opens a device instead of the regular file the application expected, which can block or hang the request and exhaust worker processes.","status":"published","published":"2026-10-01T09:34:01.728Z","modified":"2026-10-26T08:45:03.455588409Z","updated_at":"2026-11-02T15:28:34.343258Z"},{"id":"openSUSE-SU-2026:11901-1","title":"php8-8.5.11-1.1 on GA media","description":"These are all security issues fixed in the php8-8.5.11-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-09-28T00:00:00Z","modified":"2026-09-29T18:23:14.406023417Z","updated_at":"2026-11-02T16:58:40.245664Z"}]}}