PHP < 8.2.35 / 8.3.x < 8.3.36 / 8.4.x < 8.4.27 / 8.5.x < 8.5.12 Multiple Vulnerabilities

critical Nessus Plugin ID 369483

Language:

Version 1.8 Nov 5, 2026, 5:43 PM Exploit attributes ("Exploit framework core" set to "True") Plugin Feed: 202611051743
Version 1.7 Oct 27, 2026, 9:59 AM CISA reference Plugin Feed: 202610270959
Version 1.6 Oct 23, 2026, 5:56 PM Plugin metadata (Add IAVM Info) Plugin Feed: 202610231756
Version 1.5 Oct 23, 2026, 11:36 AM CVSS metrics ("Cvssv4 threat vector" set to "CVSS:4.0/E:A") CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:H/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:H/RL:O/RC:C") CVSSv2 score source (changed from "CVE-2026-109619" to "CVE-2026-109618") Exploit attributes ("Exploit available" set to "True") Exploit attributes ("Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Exploit attributes ("Exploited by malware" set to "True") Plugin Feed: 202610231136
Version 1.4 Oct 22, 2026, 10:08 AM CVSS metrics ("CVSSv2 score" set to 10.0) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C") CVSS metrics ("CVSSv3 score" set to 9.8) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H") CVSS metrics ("Cvssv4 threat vector" set to "CVSS:4.0/E:U") CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:O/RC:C") CVSSv2 score source (changed from "CVE-2026-109618" to "CVE-2026-109619") Exploit attributes ("Exploit available" set to "False") Exploit attributes ("Exploitability ease" set to "No known exploits are available") Plugin Feed: 202610221008
Version 1.3 Oct 22, 2026, 12:02 AM Detection (add local detection and agent capabilities) New Plugin Feed: 202610220002

* Changelogs are generally available for changes made after Nov 1, 2022