php
Security Risk Profile
42
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 855 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from April 17, 1997 to present
855
Total CVEs
451
Critical+High
7
Exploited
149
Unpatched
Threat Assessment
Avg CVSS
6.8
Base severity
Avg EPSS
4%
Exploit probability
Unpatched
149
Critical/High
Risk Level
42/100
medium
⚠️ 7 Active Exploits⚡ 1 Zero-Days🆕 5Fresh (<7d)📈 5 in Last 30 Days
Severity Distribution
Critical
174High
277Medium
345Low
45Exploit Likelihood
>50% chance
120-50%
05-20%
0<5%
23Age Distribution
Common Weaknesses (CWE)
1
Buffer Overflow
161
2
Input Validation
84
3
Integer Overflow
80
4
Use After Free
45
5
Null Pointer Dereference
37
Most Affected Products
1. PHP PHP17234
2. redhat/php300
3. Canonical Ubuntu Linux288
4. Debian Debian Linux235
5. Drupal Drupal199
Recent Vulnerabilities
See more →CVE-2026-17543
CVSS 8.1high
SQL injection in ext-pgsql via E'...' backslash breakout
7/30/2026
CVE-2026-7260
CVSS 5.4medium
Stack overflow in phar with circular symlinks
7/30/2026
CVE-2026-9672
unknown
7/30/2026
CVE-2026-17544
CVSS 8.1high
Out-of-bounds write in bccomp() via crafted operand and scale
7/30/2026
CVE-2026-14355
CVSS 5.6medium
ext/openssl: Memory corruption in openssl_encrypt with AES-WRAP-PAD
7/3/2026
CVE-2018-25324
CVSS 6.9medium
Simple Fields 0.2-0.3.5 Local File Inclusion via wp_abspath
5/17/2026🔧 No Patch
REDHAT-BUG-2468572
CVSS 7.0high
5/10/2026🔧 No Patch
REDHAT-BUG-2468573
CVSS 7.0high
5/10/2026🔧 No Patch
REDHAT-BUG-2468565
CVSS 7.0high
5/10/2026🔧 No Patch
REDHAT-BUG-2468561
CVSS 4.0medium
5/10/2026🔧 No Patch
Monitor php in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.