PHP Group: exploited vulnerabilities
- 3exploited vulnerabilities
- 1used by ransomware
- Oct 26, 2026latest one added
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Oct 26, 2026 | Stale Internal Request-State | PHP | Critical 9.2 | >99.9% |
| Oct 26, 2026 | Memory Corruption | PHP | Critical 9.2 | >99.9% |
| Jun 12, 2024 | PHP-CGI OS Command Injection | PHP | Critical 9.8 | >99.9% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.