Vendor
php group
On CISA KEV1Public exploit11Avg CVSS6.2
CVEs in the catalog
102
since 2019-04
Months in the top 100
15
months with a stored rank
Best rank
#20
one month recomputed
Affected scope
Products and weakness classes
Products
| Product | CVEs | Share |
|---|---|---|
| php | 101 | 99% |
| red hat enterprise linux 10 | 6 | 6% |
| red hat enterprise linux 6 | 6 | 6% |
| red hat enterprise linux 7 | 6 | 6% |
| red hat enterprise linux 8 | 6 | 6% |
| red hat enterprise linux 9 | 6 | 6% |
| red hat hardened images | 5 | 5% |
| fedora | 2 | 2% |
| archive tar | 1 | 1.0% |
| php imagick extension | 1 | 1.0% |
Weakness classes
| Weakness | CVEs | Share |
|---|---|---|
| CWE-125 | 22 | 22% |
| CWE-20 | 11 | 11% |
| CWE-190 | 7 | 7% |
| CWE-476 | 7 | 7% |
| CWE-787 | 6 | 6% |
| CWE-416 | 5 | 5% |
| CWE-122 | 4 | 4% |
| CWE-131 | 3 | 3% |
Latest CVEs
15 most recently published
Enriched records open their full page; the rest open their catalog record.
| CVE | Weakness | Signals | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-92842 | CWE-122, CWE-125 | none yet | 5.9 | 2026-09-25 |
| CVE-2026-91768 | CWE-1023 | none yet | 6.5 | 2026-09-25 |
| CVE-2026-91769 | CWE-297 | none yet | 4.3 | 2026-09-25 |
| CVE-2026-91767 | CWE-122 | none yet | 6.5 | 2026-09-25 |
| CVE-2025-1218 | CWE-122 | none yet | 3.4 | 2026-09-25 |
| CVE-2026-91766 | CWE-200, CWE-522 | none yet | 5.9 | 2026-09-25 |
| CVE-2026-91765 | CWE-674 | none yet | 7.5 | 2026-09-25 |
| CVE-2025-14181 | CWE-190 | none yet | 6.5 | 2026-09-25 |
| CVE-2026-17545 | CWE-67 | none yet | 6.9 | 2026-09-25 |
| CVE-2026-6103 | CWE-190 | none yet | 4.3 | 2026-09-25 |
| CVE-2026-93682 | CWE-125 | none yet | 5.8 | 2026-09-25 |
| CVE-2026-7260 | CWE-121 | none yet | 5.4 | 2026-07-30 |
| CVE-2026-17544 | CWE-787 | 1 | 8.1 | 2026-07-30 |
| CVE-2026-17543 | CWE-89 | 1 | 8.1 | 2026-07-30 |
| CVE-2026-7263 | CWE-404, CWE-835 | none yet | 7.5 | 2026-05-10 |