Known vulnerabilities in PHP 8.2.32

Vendor: PHP Group
Software: PHP
Version: 8.2.32
Software CPE: cpe:2.3:a:php_group:php:*:*:*:*:*:*:*:*
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting PHP version 8.2.32 PHP 8.2.32 is affected by 3 vulnerabilities: 1 high, 1 medium, 1 low Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU140833 - Uncontrolled Recursion
CVE-2026-7260
CWE-674 Low
No
No
8.2.33, 8.3.33, 8.4.24, 8.5.9 03.08.2026 SB2026080395
SB2026080397
SB2026080398
and 5 more
#VU140832 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-17543
CWE-89 High
No
No
8.2.33, 8.3.33, 8.4.24, 8.5.9 03.08.2026 SB2026080395
SB2026080397
SB2026080398
and 5 more
#VU140831 - Improper input validation
CVE-2026-9672
CWE-20 Medium
No
No
8.2.33, 8.3.33, 8.4.24, 8.5.9 03.08.2026 SB2026080395
SB2026080396
SB2026080603
and 3 more