Red Hat Security Advisory: php:8.2 security update
Multiple security vulnerabilities affecting PHP 8.2 on Red Hat Enterprise Linux 8 have been addressed in a security update. These include a denial of service via improper handling of signed characters in ctype functions, a cross-site scripting vulnerability in PHP-FPM due to improper URL sanitation, a NULL pointer dereference in the SOAP apache:Map decoder, and a signed integer overflow in the metaphone() function. The update is rated as important by Red Hat Product Security. No CVSS scores are provided in the advisory. The vulnerabilities affect PHP 8.2 packages distributed with Red Hat Enterprise Linux 8.
AI Analysis
Technical Summary
This Red Hat security advisory (RHSA-2026:22305) addresses four vulnerabilities in PHP 8.2 on Red Hat Enterprise Linux 8. CVE-2026-7258 is a denial of service caused by improper handling of signed characters in ctype functions. CVE-2026-6735 is a cross-site scripting (XSS) vulnerability in PHP-FPM due to improper URL sanitation. CVE-2026-7262 involves a NULL pointer dereference in the SOAP apache:Map decoder when a <value> element is missing. CVE-2026-7568 is a signed integer overflow in the metaphone() function. Red Hat has released updated PHP 8.2 packages to address these issues. The advisory references multiple bugzilla entries for the fixes. No CVSS base scores are included in the advisory, but Red Hat rates the update as important.
Potential Impact
Successful exploitation of these vulnerabilities could lead to denial of service conditions (CVE-2026-7258), cross-site scripting attacks (CVE-2026-6735), application crashes due to NULL pointer dereference (CVE-2026-7262), or incorrect behavior due to integer overflow (CVE-2026-7568). The XSS vulnerability in PHP-FPM could allow attackers to execute arbitrary scripts in the context of affected web applications. The denial of service and NULL pointer dereference could cause service interruptions. The integer overflow could lead to unexpected behavior in applications using the metaphone() function. No known exploits in the wild have been reported at this time.
Mitigation Recommendations
Red Hat has released updated PHP 8.2 packages for Red Hat Enterprise Linux 8 that address these vulnerabilities. Users should apply the security update referenced in RHSA-2026:22305 as soon as possible. Detailed update instructions are available at https://access.redhat.com/articles/11258. Since this is a traditional software package update, remediation requires applying the vendor-provided patches. No additional mitigations or workarounds are specified in the advisory.
Red Hat Security Advisory: php:8.2 security update
Description
Multiple security vulnerabilities affecting PHP 8.2 on Red Hat Enterprise Linux 8 have been addressed in a security update. These include a denial of service via improper handling of signed characters in ctype functions, a cross-site scripting vulnerability in PHP-FPM due to improper URL sanitation, a NULL pointer dereference in the SOAP apache:Map decoder, and a signed integer overflow in the metaphone() function. The update is rated as important by Red Hat Product Security. No CVSS scores are provided in the advisory. The vulnerabilities affect PHP 8.2 packages distributed with Red Hat Enterprise Linux 8.
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This Red Hat security advisory (RHSA-2026:22305) addresses four vulnerabilities in PHP 8.2 on Red Hat Enterprise Linux 8. CVE-2026-7258 is a denial of service caused by improper handling of signed characters in ctype functions. CVE-2026-6735 is a cross-site scripting (XSS) vulnerability in PHP-FPM due to improper URL sanitation. CVE-2026-7262 involves a NULL pointer dereference in the SOAP apache:Map decoder when a <value> element is missing. CVE-2026-7568 is a signed integer overflow in the metaphone() function. Red Hat has released updated PHP 8.2 packages to address these issues. The advisory references multiple bugzilla entries for the fixes. No CVSS base scores are included in the advisory, but Red Hat rates the update as important.
Potential Impact
Successful exploitation of these vulnerabilities could lead to denial of service conditions (CVE-2026-7258), cross-site scripting attacks (CVE-2026-6735), application crashes due to NULL pointer dereference (CVE-2026-7262), or incorrect behavior due to integer overflow (CVE-2026-7568). The XSS vulnerability in PHP-FPM could allow attackers to execute arbitrary scripts in the context of affected web applications. The denial of service and NULL pointer dereference could cause service interruptions. The integer overflow could lead to unexpected behavior in applications using the metaphone() function. No known exploits in the wild have been reported at this time.
Mitigation Recommendations
Red Hat has released updated PHP 8.2 packages for Red Hat Enterprise Linux 8 that address these vulnerabilities. Users should apply the security update referenced in RHSA-2026:22305 as soon as possible. Detailed update instructions are available at https://access.redhat.com/articles/11258. Since this is a traditional software package update, remediation requires applying the vendor-provided patches. No additional mitigations or workarounds are specified in the advisory.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2026:22305
- Cve Count
- 4
- Additional Cves
- ["CVE-2026-7258","CVE-2026-7262","CVE-2026-7568"]
- Cvss Version
- null
Threat ID: 6a1df668e29bf47b50460d10
Added to database: 06/01/2026, 21:15:20 UTC
Last enriched: 07/22/2026, 01:45:36 UTC
Last updated: 07/31/2026, 19:24:46 UTC
Views: 105
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.