p
php group
Security Risk Profile
93
/100
criticalSecurity Risk Score
Comprehensive risk assessment based on 9 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from June 14, 2006 to present
9
Total CVEs
5
Critical+High
1
Exploited
1
Unpatched
Threat Assessment
Avg CVSS
8.1
Base severity
Avg EPSS
97%
Exploit probability
Unpatched
1
Critical/High
Risk Level
93/100
critical
⚠️ 1 Active Exploits📈 4 in Last 30 Days
Severity Distribution
Critical
4High
1Medium
2Low
0Exploit Likelihood
>50% chance
120-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
Use After Free
2
2
Command Injection
1
3
OS Command Injection
1
4
XSS
1
5
SQL Injection
1
Most Affected Products
1. Palo Alto Networks PAN-OS585
2. PHP Group Pear59
3. PHP PHP16
4. PHP Group PHP9
5. bitnami/libphp8
Recent Vulnerabilities
See more →https://reddit.com/r/sysadmin/comments/1xhlwau/php2shell_is_in_cisa_kev_with_a_federal_deadline/
unknown
php2shell is in CISA KEV with a federal deadline tomorrow (Oct 29): fixed PHP is 8.5.12 / 8.4.27 / 8.3.36 / 8.2.35, and the patch does not take effect until the workers restart
Oct 28, 2026🔧 No Patch
https://reddit.com/r/sysadmin/comments/1xg36nm/php2shell_just_made_the_week_hell_ai_is_going_to/
unknown
PHP2Shell just made the week hell. AI is going to make this our new normal.
Oct 26, 2026🔧 No Patch
CVE-2026-109619
CVSS 9.2critical
PHP Stale Internal Request-State Vulnerability
Oct 16, 2026
CVE-2026-109618
CVSS 9.2critical
Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products
Oct 16, 2026
CVE-2024-4577
CVSS 9.8EPSS 97%critical
PHP-CGI OS Command Injection Vulnerability
Jun 6, 2024⚠ Exploited
CVE-2006-7205
CVSS 5.0medium
May 24, 2007🔧 No Patch
CVE-2007-2519
CVSS 6.8medium
May 22, 2007
CVE-2006-3016
CVSS 9.3critical
Jun 14, 2006
CVE-2006-3018
CVSS 7.5high
Jun 14, 2006🔧 No Patch
Monitor php group in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.