php
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 869 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from April 17, 1997 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →CVE-2026-91766: PHP had the redirect credential leak curl fixed in 2018
Cross-origin credential leak in HTTP stream wrapper redirects
SOAP: Unbounded Recursion in Server-Side cleanup_xml_node
Heap-buffer-overflow in php_openssl_matches_wildcard_name on crafted server cert wildcard CN
IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison (memcmp 12 bytes)
OOB read / info leak in convert.* stream filters when line-break-chars contains NUL
Phar TAR phar_tar_number() Integer Overflow - Archive Entry Injection
TLS Hostname Verification Falls Back to CN After SAN Mismatch
Various packet overreads in mysqlnd_writeprotocol.c
Integer overflow to buffer overflow in soap HTTP parsing
Monitor php in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.