The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1217:01 advisory.

    * php: php-soap: php-src: PHP SOAP extension: Remote Code Execution via use-after-free vulnerability     (CVE-2026-6722)
      * PHP: PHP: Denial of Service via improper handling of signed characters in ctype functions     (CVE-2026-7258)
      * PHP: PHP-FPM: PHP-FPM: Cross-Site Scripting vulnerability via improper URL sanitation (CVE-2026-6735)
      * PHP: PHP SoapServer: Memory corruption and information disclosure via incorrect persistence handling     (CVE-2026-7261)
      * php: NULL pointer dereference in SOAP apache:Map decoder with missing  (CVE-2026-7262)
      * php: signed integer overflow in metaphone() (CVE-2026-7568)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

MiracleLinux 8 : php:7.4 (AXSA:2026-1217:01)

critical Nessus Plugin ID 325773

Version 1.2

Version 1.1

Version 1.2 Jul 13, 2026, 6:34 PM Plugin metadata Plugin Feed: 202607131834
Version 1.1 Jul 9, 2026, 1:09 PM New Plugin Feed: 202607091309