slackware SSA:2026-127-03: [slackware-security] php (SSA:2026-127-03)

The version of PHP installed on the remote host is prior to 8.4.21. It is, therefore, affected by multiple vulnerabilities as referenced in the Version 8.4.21 advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of PHP installed on the remote host is prior to 8.3.31. It is, therefore, affected by multiple vulnerabilities as referenced in the Version 8.3.31 advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of PHP installed on the remote host is prior to 8.2.31. It is, therefore, affected by multiple vulnerabilities as referenced in the Version 8.2.31 advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of PHP installed on the remote host is prior to 8.5.6. It is, therefore, affected by multiple vulnerabilities as referenced in the Version 8.5.6 advisory.

  - uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs     with a length in gigabytes. (CVE-2026-42371)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
313115	PHP 8.4.x < 8.4.21 Multiple Vulnerabilities	Nessus	CGI abuses	medium
313114	PHP 8.3.x < 8.3.31 Multiple Vulnerabilities	Nessus	CGI abuses	medium
313113	PHP 8.2.x < 8.2.31 Multiple Vulnerabilities	Nessus	CGI abuses	medium
313112	PHP 8.5.x < 8.5.6 Multiple Vulnerabilities	Nessus	CGI abuses	medium

Detections

Analytics

CVE-2026-6735

medium

Tenable Plugins

Coming Soon

medium

medium

medium

medium