Vendor
php group
On CISA KEV1Public exploit11Avg CVSS6.2
CVEs in the catalog
91
since 2019-04
Months in the top 100
15
months with a stored rank
Best rank
#20
one month recomputed
Affected scope
Products and weakness classes
Products
| Product | CVEs | Share |
|---|---|---|
| php | 90 | 99% |
| red hat enterprise linux 10 | 6 | 7% |
| red hat enterprise linux 6 | 6 | 7% |
| red hat enterprise linux 7 | 6 | 7% |
| red hat enterprise linux 8 | 6 | 7% |
| red hat enterprise linux 9 | 6 | 7% |
| red hat hardened images | 5 | 5% |
| fedora | 2 | 2% |
| archive tar | 1 | 1% |
| php imagick extension | 1 | 1% |
Weakness classes
| Weakness | CVEs | Share |
|---|---|---|
| CWE-125 | 20 | 22% |
| CWE-20 | 11 | 12% |
| CWE-476 | 7 | 8% |
| CWE-787 | 6 | 7% |
| CWE-190 | 5 | 5% |
| CWE-416 | 5 | 5% |
| CWE-131 | 3 | 3% |
| CWE-170 | 3 | 3% |
Latest CVEs
15 most recently published
Enriched records open their full page; the rest open their catalog record.
| CVE | Weakness | Signals | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-7260 | CWE-121 | none yet | 5.4 | 2026-07-30 |
| CVE-2026-17544 | CWE-787 | 1 | 8.1 | 2026-07-30 |
| CVE-2026-17543 | CWE-89 | 1 | 8.1 | 2026-07-30 |
| CVE-2026-7263 | CWE-404, CWE-835 | none yet | 7.5 | 2026-05-10 |
| CVE-2026-6104 | CWE-125 | none yet | 8.2 | 2026-05-10 |
| CVE-2026-7258 | CWE-125 | none yet | 6.3 | 2026-05-10 |
| CVE-2026-6722 | CWE-416, CWE-825 | none yet | 7.7 | 2026-05-10 |
| CVE-2026-7259 | CWE-476 | none yet | 2.1 | 2026-05-10 |
| CVE-2026-7261 | CWE-416 | none yet | 6.3 | 2026-05-10 |
| CVE-2026-7262 | CWE-476 | none yet | 7.5 | 2026-05-10 |
| CVE-2025-14179 | CWE-89 | none yet | 8.1 | 2026-05-10 |
| CVE-2026-7568 | CWE-190, CWE-125 | none yet | 7.5 | 2026-05-10 |
| CVE-2026-6735 | CWE-79 | none yet | 7.3 | 2026-05-10 |
| CVE-2025-14177 | CWE-125 | 1 | 6.3 | 2025-12-27 |
| CVE-2025-14178 | CWE-787, CWE-190 | none yet | 6.5 | 2025-12-27 |