Red Hat Security Advisory: php:8.2 security update
Multiple security vulnerabilities have been identified and addressed in the php:8.2 module for Red Hat Enterprise Linux 9. These include a denial of service via improper handling of signed characters in ctype functions, a cross-site scripting vulnerability in PHP-FPM due to improper URL sanitation, a NULL pointer dereference in the SOAP apache:Map decoder, and a signed integer overflow in the metaphone() function. Red Hat has released an important security update to fix these issues.
AI Analysis
Technical Summary
This advisory covers four distinct vulnerabilities in PHP 8.2 as packaged by Red Hat for Enterprise Linux 9. CVE-2026-7258 involves a denial of service caused by improper handling of signed characters in ctype functions. CVE-2026-6735 is a cross-site scripting (XSS) vulnerability in PHP-FPM resulting from improper URL sanitation. CVE-2026-7262 is a NULL pointer dereference triggered in the SOAP apache:Map decoder when a <value> element is missing. CVE-2026-7568 is a signed integer overflow in the metaphone() function. Red Hat has issued a security update (RHSA-2026:22143) that addresses these vulnerabilities in the php:8.2 module for Red Hat Enterprise Linux 9 and related variants.
Potential Impact
The vulnerabilities collectively could allow denial of service conditions, cross-site scripting attacks, and potential crashes due to NULL pointer dereference or integer overflow in PHP applications running on affected Red Hat Enterprise Linux 9 systems. The cross-site scripting vulnerability (CVE-2026-6735) could enable attackers to execute arbitrary scripts in the context of affected web applications using PHP-FPM. The denial of service and crash vulnerabilities could disrupt service availability.
Mitigation Recommendations
Red Hat has released an official security update (RHSA-2026:22143) for the php:8.2 module on Red Hat Enterprise Linux 9 that addresses these vulnerabilities. Users should apply this update promptly by following the instructions in the Red Hat advisory article https://access.redhat.com/articles/11258. This update fixes the issues described and no additional mitigation steps are required beyond applying the patch.
Red Hat Security Advisory: php:8.2 security update
Description
Multiple security vulnerabilities have been identified and addressed in the php:8.2 module for Red Hat Enterprise Linux 9. These include a denial of service via improper handling of signed characters in ctype functions, a cross-site scripting vulnerability in PHP-FPM due to improper URL sanitation, a NULL pointer dereference in the SOAP apache:Map decoder, and a signed integer overflow in the metaphone() function. Red Hat has released an important security update to fix these issues.
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This advisory covers four distinct vulnerabilities in PHP 8.2 as packaged by Red Hat for Enterprise Linux 9. CVE-2026-7258 involves a denial of service caused by improper handling of signed characters in ctype functions. CVE-2026-6735 is a cross-site scripting (XSS) vulnerability in PHP-FPM resulting from improper URL sanitation. CVE-2026-7262 is a NULL pointer dereference triggered in the SOAP apache:Map decoder when a <value> element is missing. CVE-2026-7568 is a signed integer overflow in the metaphone() function. Red Hat has issued a security update (RHSA-2026:22143) that addresses these vulnerabilities in the php:8.2 module for Red Hat Enterprise Linux 9 and related variants.
Potential Impact
The vulnerabilities collectively could allow denial of service conditions, cross-site scripting attacks, and potential crashes due to NULL pointer dereference or integer overflow in PHP applications running on affected Red Hat Enterprise Linux 9 systems. The cross-site scripting vulnerability (CVE-2026-6735) could enable attackers to execute arbitrary scripts in the context of affected web applications using PHP-FPM. The denial of service and crash vulnerabilities could disrupt service availability.
Mitigation Recommendations
Red Hat has released an official security update (RHSA-2026:22143) for the php:8.2 module on Red Hat Enterprise Linux 9 that addresses these vulnerabilities. Users should apply this update promptly by following the instructions in the Red Hat advisory article https://access.redhat.com/articles/11258. This update fixes the issues described and no additional mitigation steps are required beyond applying the patch.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2026:22143
- Cve Count
- 4
- Additional Cves
- ["CVE-2026-7258","CVE-2026-7262","CVE-2026-7568"]
- Cvss Version
- null
Threat ID: 6a1df668e29bf47b50460d19
Added to database: 06/01/2026, 21:15:20 UTC
Last enriched: 07/22/2026, 01:45:43 UTC
Last updated: 07/31/2026, 19:24:46 UTC
Views: 119
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.