cleanup_xml_node() in the SOAP XML parser recurses once per XML nesting level with no depth limit. An unauthenticated attacker can post a SOAP request containing tens of thousands of nested elements to any SoapServer endpoint, exhaust the stack and crash the process. The same unbounded recursion exists in the SOAP value decoder and in the WSDL node search helper.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade php84Upgrade php83Upgrade php85 | Sep 28, 2026 | Sep 25, 2026 |
| Amazon Linux Ami 2 | — | Upgrade phpUpgrade php-embeddedUpgrade php-commonUpgrade php-dbgUpgrade php-xmlUpgrade php-debuginfoUpgrade php-mbstringUpgrade php-opcacheUpgrade php-develUpgrade php-mysqlndUpgrade php-snmpUpgrade php-cliUpgrade php-fpmUpgrade php-ldapUpgrade php-pgsqlUpgrade php-enchantUpgrade php-pdoUpgrade php-gmpUpgrade php-bcmathUpgrade php-soapUpgrade php-processUpgrade php-dbaUpgrade php-sodiumUpgrade php-pspellUpgrade php-gdUpgrade php-odbcUpgrade php-intl | Oct 19, 2026 | Oct 19, 2026 |
| Amazon_linux_2023 | — | Upgrade php8.4-embedded-debuginfoUpgrade php8.5-common-debuginfoUpgrade php8.2-intlUpgrade php8.2-sodium-debuginfoUpgrade php8.3-develUpgrade php8.2-embedded-debuginfoUpgrade php8.2-gmp-debuginfoUpgrade php8.5-pgsql-debuginfoUpgrade php8.2-dba-debuginfoUpgrade php8.2-pdo-debuginfoUpgrade php8.4-enchant-debuginfoUpgrade php8.4-intl-debuginfoUpgrade php8.5-develUpgrade php8.5-odbc-debuginfoUpgrade php8.3-embeddedUpgrade php8.4-odbcUpgrade php8.3-dbg-debuginfoUpgrade php8.3-fpmUpgrade php8.3-debugsourceUpgrade php8.3-gmp-debuginfoUpgrade php8.3-sodium-debuginfoUpgrade php8.2-snmp-debuginfoUpgrade php8.4-cli-debuginfoUpgrade php8.3Upgrade php8.4-opcache-debuginfoUpgrade php8.5-tidy-debuginfoUpgrade php8.4-fpm-debuginfoUpgrade php8.5-pdoUpgrade php8.2-commonUpgrade php8.4-common-debuginfoUpgrade php8.4-opcacheUpgrade php8.4-pdoUpgrade php8.4-odbc-debuginfoUpgrade php8.4-tidyUpgrade php8.4-gmpUpgrade php8.5-debuginfoUpgrade php8.3-pspell-debuginfoUpgrade php8.5-soap-debuginfoUpgrade php8.4-ffiUpgrade php8.5-modphpUpgrade php8.5-sodiumUpgrade php8.2-pdoUpgrade php8.5-ffiUpgrade php8.3-mbstringUpgrade php8.2-fpmUpgrade php8.4-sodium-debuginfoUpgrade php8.5-mysqlndUpgrade php8.3-gmpUpgrade php8.5-mysqlnd-debuginfoUpgrade php8.2-mbstring-debuginfoUpgrade php8.5-bcmathUpgrade php8.2-mysqlnd-debuginfoUpgrade php8.2-odbcUpgrade php8.3-cliUpgrade php8.4-zip-debuginfoUpgrade php8.3-xml-debuginfoUpgrade php8.4-debugsourceUpgrade php8.2-debuginfoUpgrade php8.3-pgsql-debuginfoUpgrade php8.3-ffi-debuginfoUpgrade php8.4-sodiumUpgrade php8.2-enchantUpgrade php8.3-soapUpgrade php8.3-mbstring-debuginfoUpgrade php8.4-fpmUpgrade php8.5-dbgUpgrade php8.5-debugsourceUpgrade php8.2-ldap-debuginfoUpgrade php8.5-pgsqlUpgrade php8.5-tidyUpgrade php8.2-embeddedUpgrade php8.3-commonUpgrade php8.3-dbaUpgrade php8.3-snmpUpgrade php8.2-bcmathUpgrade php8.2-common-debuginfoUpgrade php8.5-snmp-debuginfoUpgrade php8.3-enchant-debuginfoUpgrade php8.5-zipUpgrade php8.2-ffi-debuginfoUpgrade php8.3-opcache-debuginfoUpgrade php8.3-processUpgrade php8.3-fpm-debuginfoUpgrade php8.4-process-debuginfoUpgrade php8.5-dba-debuginfoUpgrade php8.5-odbcUpgrade php8.4Upgrade php8.3-modphp-debuginfoUpgrade php8.2-soap-debuginfoUpgrade php8.5-snmpUpgrade php8.4-mbstringUpgrade php8.4-tidy-debuginfoUpgrade php8.5-cliUpgrade php8.4-embeddedUpgrade php8.4-mysqlndUpgrade php8.5-enchant-debuginfoUpgrade php8.2-gd-debuginfoUpgrade php8.4-ldap-debuginfoUpgrade php8.3-tidy-debuginfoUpgrade php8.2-opcacheUpgrade php8.4-soapUpgrade php8.4-ldapUpgrade php8.4-dbaUpgrade php8.3-gdUpgrade php8.3-debuginfoUpgrade php8.5-fpm-debuginfoUpgrade php8.4-bcmath-debuginfoUpgrade php8.5-gd-debuginfoUpgrade php8.4-debuginfoUpgrade php8.3-gd-debuginfoUpgrade php8.3-bcmath-debuginfoUpgrade php8.2-soapUpgrade php8.2-processUpgrade php8.2-odbc-debuginfoUpgrade php8.2-ldapUpgrade php8.2-intl-debuginfoUpgrade php8.2-dbg-debuginfoUpgrade php8.2-dbaUpgrade php8.5-xmlUpgrade php8.5-sodium-debuginfoUpgrade php8.4-intlUpgrade php8.4-gd-debuginfoUpgrade php8.4-enchantUpgrade php8.4-cliUpgrade php8.3-zipUpgrade php8.3-intlUpgrade php8.3-mysqlnd-debuginfoUpgrade php8.3-modphpUpgrade php8.3-xmlUpgrade php8.5-zip-debuginfoUpgrade php8.5-xml-debuginfoUpgrade php8.5-soapUpgrade php8.5-process-debuginfoUpgrade php8.5-pdo-debuginfoUpgrade php8.5-gmpUpgrade php8.5-dbaUpgrade php8.4-zipUpgrade php8.4-modphpUpgrade php8.3-tidyUpgrade php8.3-soap-debuginfoUpgrade php8.3-pspellUpgrade php8.3-odbc-debuginfoUpgrade php8.2-zip-debuginfoUpgrade php8.2-snmpUpgrade php8.2-pspellUpgrade php8.4-snmp-debuginfoUpgrade php8.4-develUpgrade php8.4-bcmathUpgrade php8.3-bcmathUpgrade php8.2-xml-debuginfoUpgrade php8.2-pspell-debuginfoUpgrade php8.2-fpm-debuginfoUpgrade php8.5-ldapUpgrade php8.5-gdUpgrade php8.3-dba-debuginfoUpgrade php8.3-dbgUpgrade php8.3-ffiUpgrade php8.5-ffi-debuginfoUpgrade php8.4-mysqlnd-debuginfoUpgrade php8.5-embedded-debuginfoUpgrade php8.5-dbg-debuginfoUpgrade php8.4-xmlUpgrade php8.4-snmpUpgrade php8.4-gdUpgrade php8.4-commonUpgrade php8.3-process-debuginfoUpgrade php8.3-pgsqlUpgrade php8.3-mysqlndUpgrade php8.3-cli-debuginfoUpgrade php8.5-intl-debuginfoUpgrade php8.2-process-debuginfoUpgrade php8.2-opcache-debuginfoUpgrade php8.2-debugsourceUpgrade php8.5-fpmUpgrade php8.5Upgrade php8.2-tidyUpgrade php8.3-enchantUpgrade php8.3-embedded-debuginfoUpgrade php8.2-mysqlndUpgrade php8.2-gdUpgrade php8.2-ffiUpgrade php8.2-develUpgrade php8.2Upgrade php8.5-gmp-debuginfoUpgrade php8.5-commonUpgrade php8.5-cli-debuginfoUpgrade php8.5-bcmath-debuginfoUpgrade php8.4-pgsql-debuginfoUpgrade php8.4-gmp-debuginfoUpgrade php8.4-ffi-debuginfoUpgrade php8.4-dba-debuginfoUpgrade php8.3-snmp-debuginfoUpgrade php8.3-opcacheUpgrade php8.5-enchantUpgrade php8.2-pgsql-debuginfoUpgrade php8.5-processUpgrade php8.5-intlUpgrade php8.4-pdo-debuginfoUpgrade php8.4-modphp-debuginfoUpgrade php8.4-mbstring-debuginfoUpgrade php8.4-dbgUpgrade php8.3-pdo-debuginfoUpgrade php8.3-pdoUpgrade php8.3-odbcUpgrade php8.3-ldapUpgrade php8.3-intl-debuginfoUpgrade php8.3-common-debuginfoUpgrade php8.2-zipUpgrade php8.2-xmlUpgrade php8.2-sodiumUpgrade php8.2-mbstringUpgrade php8.2-gmpUpgrade php8.2-dbgUpgrade php8.2-cli-debuginfoUpgrade php8.2-cliUpgrade php8.2-bcmath-debuginfoUpgrade php8.5-mbstringUpgrade php8.4-dbg-debuginfoUpgrade php8.4-xml-debuginfoUpgrade php8.4-soap-debuginfoUpgrade php8.4-processUpgrade php8.3-zip-debuginfoUpgrade php8.3-sodiumUpgrade php8.3-ldap-debuginfoUpgrade php8.2-tidy-debuginfoUpgrade php8.2-pgsqlUpgrade php8.5-mbstring-debuginfoUpgrade php8.5-modphp-debuginfoUpgrade php8.5-embeddedUpgrade php8.2-enchant-debuginfoUpgrade php8.5-ldap-debuginfoUpgrade php8.4-pgsql | Oct 13, 2026 | Sep 25, 2026 |
| Debian | — | Upgrade php8.2Upgrade php8.4 | Sep 30, 2026 | Sep 25, 2026 |
| Redhat_linux | — | No solution exists | Sep 28, 2026 | Sep 25, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub