In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, 8.5.* before 8.5.6, due to improper sanitation of user data, it allows an attacker to compose an URL, which will cause the target to execute arbitrary JavaScript code (XSS) on the target's machine when the target is viewing the PHP-FPM status page.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-dbgUpgrade php-pecl-redis6Upgrade php-fpmUpgrade php-pecl-xdebugUpgrade php-enchantUpgrade php-pdoUpgrade libzipUpgrade php-gmpUpgrade php-mbstringUpgrade php-pecl-zipUpgrade php-xmlUpgrade php-develUpgrade php-jsonUpgrade php-pecl-xdebug3Upgrade php-bcmathUpgrade php-gdUpgrade php-pgsqlUpgrade php-pearUpgrade php-soapUpgrade php-ldapUpgrade php-xmlrpcUpgrade php-pecl-apcuUpgrade php-pecl-apcu-develUpgrade libzip-toolsUpgrade libzip-develUpgrade php-odbcUpgrade phpUpgrade php-intlUpgrade php-opcacheUpgrade php-commonUpgrade php-pecl-rrdUpgrade apcu-panelUpgrade php-cliUpgrade php-dbaUpgrade php-mysqlndUpgrade php-snmpUpgrade php-processUpgrade php-ffiUpgrade php-embedded | Jun 1, 2026 | Jun 1, 2026 |
| Alpine Linux | — | Upgrade php83Upgrade php84Upgrade php81Upgrade php82Upgrade php85 | May 15, 2026 | May 10, 2026 |
| Amazon Linux Ami 2 | — | Upgrade php-intlUpgrade php-ldapUpgrade php-dbgUpgrade php-bcmathUpgrade php-soapUpgrade php-sodiumUpgrade php-odbcUpgrade phpUpgrade php-dbaUpgrade php-pgsqlUpgrade php-commonUpgrade php-develUpgrade php-gmpUpgrade php-snmpUpgrade php-processUpgrade php-mbstringUpgrade php-pdoUpgrade php-opcacheUpgrade php-fpmUpgrade php-gdUpgrade php-debuginfoUpgrade php-xmlUpgrade php-mysqlndUpgrade php-enchantUpgrade php-cliUpgrade php-pspellUpgrade php-embedded | Jun 8, 2026 | Jun 8, 2026 |
| Amazon_linux_2023 | — | Upgrade php8.2-dbgUpgrade php8.4-tidyUpgrade php8.5-soap-debuginfoUpgrade php8.2-bcmath-debuginfoUpgrade php8.4-pdoUpgrade php8.2-enchantUpgrade php8.2-snmp-debuginfoUpgrade php8.2-pgsqlUpgrade php8.5-odbcUpgrade php8.5-pgsql-debuginfoUpgrade php8.5-odbc-debuginfoUpgrade php8.4-pgsql-debuginfoUpgrade php8.5-dbgUpgrade php8.4-zip-debuginfoUpgrade php8.4-gd-debuginfoUpgrade php8.4-intl-debuginfoUpgrade php8.5-embeddedUpgrade php8.4-pgsqlUpgrade php8.2-develUpgrade php8.4-ffi-debuginfoUpgrade php8.3-ldap-debuginfoUpgrade php8.3-gd-debuginfoUpgrade php8.3-intlUpgrade php8.4-embeddedUpgrade php8.5-dba-debuginfoUpgrade php8.2-debuginfoUpgrade php8.2-gmpUpgrade php8.5-sodium-debuginfoUpgrade php8.2-mysqlnd-debuginfoUpgrade php8.3-dbg-debuginfoUpgrade php8.4-mysqlndUpgrade php8.3-gmp-debuginfoUpgrade php8.2-dba-debuginfoUpgrade php8.2-embedded-debuginfoUpgrade php8.2-enchant-debuginfoUpgrade php8.5-zip-debuginfoUpgrade php8.2-intl-debuginfoUpgrade php8.5-ldap-debuginfoUpgrade php8.2-soapUpgrade php8.4-soapUpgrade php8.2-embeddedUpgrade php8.2-gmp-debuginfoUpgrade php8.2-opcacheUpgrade php8.3-embeddedUpgrade php8.5-xml-debuginfoUpgrade php8.4-gmpUpgrade php8.4-cliUpgrade php8.3-mysqlnd-debuginfoUpgrade php8.5-dbg-debuginfoUpgrade php8.4-develUpgrade php8.4-sodium-debuginfoUpgrade php8.4-common-debuginfoUpgrade php8.3-processUpgrade php8.3-ffi-debuginfoUpgrade php8.3-fpm-debuginfoUpgrade php8.5-snmpUpgrade php8.3-fpmUpgrade php8.5-mysqlndUpgrade php8.4-xml-debuginfoUpgrade php8.5-gd-debuginfoUpgrade php8.3-commonUpgrade php8.3-gmpUpgrade php8.3-dbaUpgrade php8.3-snmpUpgrade php8.2-mbstring-debuginfoUpgrade php8.4-opcacheUpgrade php8.5-mbstring-debuginfoUpgrade php8.4Upgrade php8.5-tidy-debuginfoUpgrade php8.5-fpm-debuginfoUpgrade php8.5-soapUpgrade php8.3-enchant-debuginfoUpgrade php8.4-enchant-debuginfoUpgrade php8.4-fpmUpgrade php8.4-snmp-debuginfoUpgrade php8.5-develUpgrade php8.2-common-debuginfoUpgrade php8.5-embedded-debuginfoUpgrade php8.2-soap-debuginfoUpgrade php8.3-pdo-debuginfoUpgrade php8.3-sodiumUpgrade php8.5-sodiumUpgrade php8.2-cli-debuginfoUpgrade php8.5-fpmUpgrade php8.3-intl-debuginfoUpgrade php8.4-modphpUpgrade php8.4-soap-debuginfoUpgrade php8.4-tidy-debuginfoUpgrade php8.3-modphpUpgrade php8.3-mbstringUpgrade php8.5-bcmath-debuginfoUpgrade php8.5-enchant-debuginfoUpgrade php8.4-dbg-debuginfoUpgrade php8.3-mbstring-debuginfoUpgrade php8.4-ldap-debuginfoUpgrade php8.4-enchantUpgrade php8.3-mysqlndUpgrade php8.2-sodium-debuginfoUpgrade php8.3-debuginfoUpgrade php8.3-debugsourceUpgrade php8.3-opcache-debuginfoUpgrade php8.2-tidy-debuginfoUpgrade php8.2-xmlUpgrade php8.2-fpmUpgrade php8.2-ldap-debuginfoUpgrade php8.5-tidyUpgrade php8.2-mbstringUpgrade php8.2-process-debuginfoUpgrade php8.2-tidyUpgrade php8.2-xml-debuginfoUpgrade php8.4-cli-debuginfoUpgrade php8.3-tidy-debuginfoUpgrade php8.3-zipUpgrade php8.5-ldapUpgrade php8.5-pgsqlUpgrade php8.4-process-debuginfoUpgrade php8.3-modphp-debuginfoUpgrade php8.4-embedded-debuginfoUpgrade php8.5-modphp-debuginfoUpgrade php8.4-pdo-debuginfoUpgrade php8.3-sodium-debuginfoUpgrade php8.3-dba-debuginfoUpgrade php8.3-common-debuginfoUpgrade php8.3-bcmath-debuginfoUpgrade php8.5-zipUpgrade php8.5-processUpgrade php8.5-debugsourceUpgrade php8.4-mysqlnd-debuginfoUpgrade php8.4-modphp-debuginfoUpgrade php8.4-ffiUpgrade php8.4-dbaUpgrade php8.2-bcmathUpgrade php8.2Upgrade php8.5-cliUpgrade php8.4-dbgUpgrade php8.4-commonUpgrade php8.4-bcmath-debuginfoUpgrade php8.2-pgsql-debuginfoUpgrade php8.2-snmpUpgrade php8.2-zipUpgrade php8.3Upgrade php8.2-pdo-debuginfoUpgrade php8.2-pdoUpgrade php8.2-mysqlndUpgrade php8.2-gdUpgrade php8.5-mbstringUpgrade php8.3-odbcUpgrade php8.4-dba-debuginfoUpgrade php8.3-xml-debuginfoUpgrade php8.3-pspell-debuginfoUpgrade php8.3-odbc-debuginfoUpgrade php8.3-gdUpgrade php8.3-cliUpgrade php8.5-pdoUpgrade php8.2-ffiUpgrade php8.5-gmpUpgrade php8.3-soapUpgrade php8.2-zip-debuginfoUpgrade php8.2-pspell-debuginfoUpgrade php8.5-process-debuginfoUpgrade php8.5-pdo-debuginfoUpgrade php8.5-cli-debuginfoUpgrade php8.5Upgrade php8.4-xmlUpgrade php8.5-gmp-debuginfoUpgrade php8.5-ffi-debuginfoUpgrade php8.4-opcache-debuginfoUpgrade php8.4-mbstring-debuginfoUpgrade php8.3-snmp-debuginfoUpgrade php8.2-intlUpgrade php8.5-xmlUpgrade php8.2-debugsourceUpgrade php8.2-ldapUpgrade php8.2-commonUpgrade php8.5-modphpUpgrade php8.5-gdUpgrade php8.5-ffiUpgrade php8.5-enchantUpgrade php8.5-debuginfoUpgrade php8.5-bcmathUpgrade php8.4-processUpgrade php8.4-intlUpgrade php8.4-gdUpgrade php8.4-debugsourceUpgrade php8.4-bcmathUpgrade php8.5-mysqlnd-debuginfoUpgrade php8.3-process-debuginfoUpgrade php8.3-tidyUpgrade php8.3-cli-debuginfoUpgrade php8.4-fpm-debuginfoUpgrade php8.3-zip-debuginfoUpgrade php8.3-pgsql-debuginfoUpgrade php8.3-ldapUpgrade php8.3-dbgUpgrade php8.4-zipUpgrade php8.3-soap-debuginfoUpgrade php8.3-enchantUpgrade php8.2-odbc-debuginfoUpgrade php8.2-odbcUpgrade php8.3-embedded-debuginfoUpgrade php8.2-sodiumUpgrade php8.2-opcache-debuginfoUpgrade php8.5-intlUpgrade php8.5-commonUpgrade php8.2-ffi-debuginfoUpgrade php8.5-snmp-debuginfoUpgrade php8.4-odbcUpgrade php8.4-debuginfoUpgrade php8.3-ffiUpgrade php8.3-bcmathUpgrade php8.2-fpm-debuginfoUpgrade php8.4-gmp-debuginfoUpgrade php8.4-ldapUpgrade php8.2-processUpgrade php8.4-snmpUpgrade php8.5-dbaUpgrade php8.5-common-debuginfoUpgrade php8.2-dbaUpgrade php8.2-cliUpgrade php8.3-xmlUpgrade php8.3-pspellUpgrade php8.3-pgsqlUpgrade php8.3-pdoUpgrade php8.2-pspellUpgrade php8.2-gd-debuginfoUpgrade php8.2-dbg-debuginfoUpgrade php8.5-intl-debuginfoUpgrade php8.3-opcacheUpgrade php8.3-develUpgrade php8.4-mbstringUpgrade php8.4-sodiumUpgrade php8.4-odbc-debuginfo | May 28, 2026 | May 10, 2026 |
| Debian | — | Upgrade php8.4Upgrade php7.4Upgrade php8.2 | May 10, 2026 | May 10, 2026 |
| Oracle_linux | — | Upgrade php-pecl-apcuUpgrade php-embeddedUpgrade php-gmpUpgrade phpUpgrade php-intlUpgrade php-pdoUpgrade php-commonUpgrade php-pecl-xdebug3Upgrade libzipUpgrade php-cliUpgrade php-odbcUpgrade php-dbgUpgrade php-fpmUpgrade php-enchantUpgrade php-pecl-apcu-develUpgrade php-opcacheUpgrade php-ldapUpgrade php-pgsqlUpgrade php-bcmathUpgrade php-pearUpgrade php-develUpgrade php-xmlUpgrade php-pecl-zipUpgrade php-mysqlndUpgrade apcu-panelUpgrade libzip-develUpgrade php-mbstringUpgrade php-soapUpgrade php-gdUpgrade php-pecl-rrdUpgrade php-processUpgrade libzip-toolsUpgrade php-ffiUpgrade php-dbaUpgrade php-snmp | Jun 4, 2026 | May 10, 2026 |
| Redhat_linux | — | Upgrade libzip-debugsourceUpgrade libzipUpgrade php-pdoUpgrade php-mbstring-debuginfoUpgrade php8.4-opcacheUpgrade php8.4-embeddedUpgrade php-pecl-redis6-debugsourceUpgrade php-pecl-xdebug3-debugsourceUpgrade php-dbaUpgrade php-process-debuginfoUpgrade php-ldapUpgrade apcu-panelUpgrade php8.4Upgrade php-ldap-debuginfoUpgrade php8.4-process-debuginfoUpgrade php8.4-ldap-debuginfoUpgrade php-json-debuginfoUpgrade php-processUpgrade php8.4-enchant-debuginfoUpgrade php-gmp-debuginfoUpgrade php-pdo-debuginfoUpgrade php8.4-intlUpgrade php8.4-pgsqlUpgrade php-mysqlnd-debuginfoUpgrade php-ffiUpgrade libzip-tools-debuginfoUpgrade php8.4-opcache-debuginfoUpgrade php-soapUpgrade php8.4-common-debuginfoUpgrade php-commonUpgrade php8.4-mbstringUpgrade php-dbgUpgrade php-fpm-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-pecl-redis6-debuginfoUpgrade php8.4-cli-debuginfoUpgrade php-odbcUpgrade php8.4-embedded-debuginfoUpgrade php-dba-debuginfoUpgrade php-xml-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-odbc-debuginfoUpgrade php-pgsqlUpgrade libzip-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php8.4-dbg-debuginfoUpgrade php-jsonUpgrade php-snmp-debuginfoUpgrade php8.4-xml-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-pecl-rrdUpgrade php-pecl-apcu-develUpgrade php8.4-fpmUpgrade php8.4-fpm-debuginfoUpgrade libzip-toolsUpgrade php-cli-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-gmpUpgrade php-pgsql-debuginfoUpgrade php-ffi-debuginfoUpgrade php-pecl-zipUpgrade php8.4-develUpgrade php-intlUpgrade php8.4-intl-debuginfoUpgrade php8.4-debugsourceUpgrade php8.4-odbcUpgrade php8.4-pdoUpgrade phpUpgrade php-gdUpgrade php8.4-mysqlndUpgrade php8.4-gmpUpgrade php8.4-cliUpgrade php-enchant-debuginfoUpgrade php-embedded-debuginfoUpgrade php-embeddedUpgrade php8.4-ffiUpgrade php8.4-gdUpgrade php8.4-commonUpgrade php-debugsourceUpgrade php-common-debuginfoUpgrade php8.4-pgsql-debuginfoUpgrade php8.4-bcmathUpgrade php8.4-soapUpgrade php-dbg-debuginfoUpgrade php-xmlrpcUpgrade php-snmpNo solution existsUpgrade php-opcache-debuginfoUpgrade php8.4-snmp-debuginfoUpgrade php-cliUpgrade php-xmlUpgrade php8.4-xmlUpgrade php-pecl-xdebug3Upgrade php8.4-odbc-debuginfoUpgrade php-intl-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php8.4-mysqlnd-debuginfoUpgrade php-pecl-redis6Upgrade php-opcacheUpgrade php-fpmUpgrade php8.4-gd-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php8.4-ldapUpgrade php8.4-ffi-debuginfoUpgrade php8.4-dbaUpgrade libzip-develUpgrade php-debuginfoUpgrade php8.4-mbstring-debuginfoUpgrade php-pecl-xdebugUpgrade php-pecl-apcu-debuginfoUpgrade php-mbstringUpgrade php-pecl-zip-debugsourceUpgrade php-mysqlndUpgrade php-develUpgrade php-bcmathUpgrade php8.4-snmpUpgrade php8.4-processUpgrade php8.4-debuginfoUpgrade php-enchantUpgrade php8.4-dbgUpgrade php-pecl-apcuUpgrade php8.4-dba-debuginfoUpgrade php-gd-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-soap-debuginfoUpgrade php8.4-soap-debuginfoUpgrade php8.4-pdo-debuginfoUpgrade php8.4-gmp-debuginfoUpgrade php8.4-enchantUpgrade php8.4-bcmath-debuginfoUpgrade php-pecl-xdebug3-debuginfoUpgrade php-pear | Jun 3, 2026 | May 10, 2026 |
| Rocky_linux | — | Upgrade php-pecl-apcu-debuginfoUpgrade php8.4-gmp-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-pgsql-debuginfoUpgrade php8.4-pgsqlUpgrade php8.4-pdoUpgrade php8.4-pdo-debuginfoUpgrade php8.4-commonUpgrade php-pecl-redis6-debugsourceUpgrade php8.4-develUpgrade php-mysqlnd-debuginfoUpgrade php8.4-processUpgrade php-pdo-debuginfoUpgrade php-mbstringUpgrade php8.4-soap-debuginfoUpgrade php8.4-gmpUpgrade php-opcache-debuginfoUpgrade php-dbg-debuginfoUpgrade php8.4-process-debuginfoUpgrade php8.4-dba-debuginfoUpgrade php-ldap-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php8.4Upgrade php-processUpgrade php8.4-enchant-debuginfoUpgrade php8.4-fpm-debuginfoUpgrade php-soapUpgrade php8.4-ldap-debuginfoUpgrade php8.4-opcacheUpgrade php8.4-mysqlndUpgrade php-debuginfoUpgrade php8.4-mbstring-debuginfoUpgrade php8.4-xml-debuginfoUpgrade php-cli-debuginfoUpgrade php-xmlrpcUpgrade php-snmpUpgrade php-pecl-rrdUpgrade php8.4-bcmathUpgrade php8.4-snmpUpgrade php8.4-snmp-debuginfoUpgrade php8.4-dbaUpgrade php-dbaUpgrade php-process-debuginfoUpgrade libzip-toolsUpgrade php-soap-debuginfoUpgrade libzip-debugsourceUpgrade php8.4-enchantUpgrade php-gdUpgrade php-xml-debuginfoUpgrade php8.4-dbgUpgrade php8.4-ffi-debuginfoUpgrade php-snmp-debuginfoUpgrade php-ffiUpgrade php-intl-debuginfoUpgrade php8.4-embedded-debuginfoUpgrade php-pecl-redis6-debuginfoUpgrade libzip-develUpgrade php-embeddedUpgrade php8.4-xmlUpgrade php-jsonUpgrade php-fpmUpgrade phpUpgrade php8.4-odbcUpgrade php-pecl-apcu-debugsourceUpgrade php-pecl-apcuUpgrade php8.4-gd-debuginfoUpgrade php8.4-ldapUpgrade php8.4-dbg-debuginfoUpgrade php8.4-soapUpgrade php8.4-intlUpgrade php8.4-pgsql-debuginfoUpgrade php-pecl-apcu-develUpgrade php8.4-debuginfoUpgrade php-cliUpgrade php8.4-embeddedUpgrade php8.4-common-debuginfoUpgrade php-pgsqlUpgrade php-pecl-xdebug-debugsourceUpgrade php-opcacheUpgrade php-intlUpgrade php-develUpgrade php-gd-debuginfoUpgrade php8.4-mbstringUpgrade php8.4-odbc-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-zipUpgrade php-embedded-debuginfoUpgrade php-common-debuginfoUpgrade php-commonUpgrade libzipUpgrade php-xmlrpc-debuginfoUpgrade php-fpm-debuginfoUpgrade php-dbgUpgrade php-json-debuginfoUpgrade php-gmpUpgrade php-odbcUpgrade php-mysqlndUpgrade php-mbstring-debuginfoUpgrade php-ffi-debuginfoUpgrade php-debugsourceUpgrade php8.4-ffiUpgrade php-xmlUpgrade php-pecl-xdebug3-debugsourceUpgrade php8.4-opcache-debuginfoUpgrade php-enchant-debuginfoUpgrade php8.4-gdUpgrade php8.4-bcmath-debuginfoUpgrade php8.4-mysqlnd-debuginfoUpgrade php8.4-intl-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-gmp-debuginfoUpgrade php8.4-fpmUpgrade php-pecl-xdebugUpgrade php-pecl-xdebug-debuginfoUpgrade php8.4-debugsourceUpgrade php8.4-cli-debuginfoUpgrade php-pdoUpgrade php-dba-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-ldapUpgrade libzip-debuginfoUpgrade php-enchantUpgrade php-bcmathUpgrade php-pecl-xdebug3Upgrade php8.4-cliUpgrade php-pecl-xdebug3-debuginfoUpgrade php-odbc-debuginfo | Jun 2, 2026 | Jun 1, 2026 |
| Ubuntu | — | Upgrade php8.4Upgrade php8.5Upgrade php8.3Upgrade php8.1 | May 28, 2026 | May 28, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub