Beveiligingsadvies

CVE-2026-7262

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-05-10 04:00:09

Laatst bijgewerkt 2026-07-15 00:40:18

Toegewezen door php

CVSS-score 7.5

Status PUBLISHED

Beschrijving

In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, when a SOAP server has a typemap configured, the decoding process contains a mistake which checks the wrong variable in case of missing value element. This leads to dereferences a NULL pointer, causing a segmentation fault. This allows a remote unauthenticated attacker to crash the PHP SOAP server process, resulting in denial of service.

← Alle CVE's bekijken Bekijk op cve.org ↗