Количество 16
Количество 16
GHSA-62xp-839h-2637
IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison (memcmp 12 bytes)
CVE-2026-91768
The IPv6 branch of the FastCGI client access check compares only the first 12 bytes of a 16-byte IPv6 address, so listen.allowed_clients matches on a /96 prefix instead of the exact address. An attacker who can source an address sharing the first 96 bits with an allowed one passes the check and reaches the FastCGI endpoint.
CVE-2026-91768
The IPv6 branch of the FastCGI client access check compares only the first 12 bytes of a 16-byte IPv6 address, so listen.allowed_clients matches on a /96 prefix instead of the exact address. An attacker who can source an address sharing the first 96 bits with an allowed one passes the check and reaches the FastCGI endpoint.
CVE-2026-91768
The IPv6 branch of the FastCGI client access check compares only the first 12 bytes of a 16-byte IPv6 address, so listen.allowed_clients matches on a /96 prefix instead of the exact address. An attacker who can source an address sharing the first 96 bits with an allowed one passes the check and reaches the FastCGI endpoint.
CVE-2026-91768
IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison (memcmp 12 bytes)
CVE-2026-91768
The IPv6 branch of the FastCGI client access check compares only the f ...
openSUSE-SU-2026:22045-1
Security update for php8
SUSE-SU-2026:4651-1
Security update for php8
SUSE-SU-2026:4603-1
Security update for php8
SUSE-SU-2026:4602-1
Security update for php8
ALT-PU-2026-17471
ALT-PU-2026-17471: package `php8.2` update to version 8.2.34-alt1
ALT-PU-2026-17464
ALT-PU-2026-17464: package `php8.4` update to version 8.4.26-alt1
ALT-PU-2026-17462
ALT-PU-2026-17462: package `php8.3` update to version 8.3.35-alt1
ALT-PU-2026-17414
ALT-PU-2026-17414: package `php8.5` update to version 8.5.11-alt1
RLSA-2026:87080
Important: php:7.4 security update
ELSA-2026-87080
ELSA-2026-87080: php:7.4 security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-62xp-839h-2637 IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison (memcmp 12 bytes) | CVSS3: 6.5 | 1% Низкий | 29 дней назад |
 | CVE-2026-91768 The IPv6 branch of the FastCGI client access check compares only the first 12 bytes of a 16-byte IPv6 address, so listen.allowed_clients matches on a /96 prefix instead of the exact address. An attacker who can source an address sharing the first 96 bits with an allowed one passes the check and reaches the FastCGI endpoint. | CVSS3: 6.5 | 1% Низкий | 28 дней назад |
 | CVE-2026-91768 The IPv6 branch of the FastCGI client access check compares only the first 12 bytes of a 16-byte IPv6 address, so listen.allowed_clients matches on a /96 prefix instead of the exact address. An attacker who can source an address sharing the first 96 bits with an allowed one passes the check and reaches the FastCGI endpoint. | CVSS3: 6.5 | 1% Низкий | 28 дней назад |
 | CVE-2026-91768 The IPv6 branch of the FastCGI client access check compares only the first 12 bytes of a 16-byte IPv6 address, so listen.allowed_clients matches on a /96 prefix instead of the exact address. An attacker who can source an address sharing the first 96 bits with an allowed one passes the check and reaches the FastCGI endpoint. | CVSS3: 6.5 | 1% Низкий | 28 дней назад |
 | CVE-2026-91768 IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison (memcmp 12 bytes) | CVSS3: 6.5 | 1% Низкий | 25 дней назад |
| CVE-2026-91768 The IPv6 branch of the FastCGI client access check compares only the f ... | CVSS3: 6.5 | 1% Низкий | 28 дней назад |
 | openSUSE-SU-2026:22045-1 Security update for php8 | 16 дней назад | ||
| SUSE-SU-2026:4651-1 Security update for php8 | 10 дней назад | ||
| SUSE-SU-2026:4603-1 Security update for php8 | 14 дней назад | ||
| SUSE-SU-2026:4602-1 Security update for php8 | 14 дней назад | ||
| ALT-PU-2026-17471 ALT-PU-2026-17471: package `php8.2` update to version 8.2.34-alt1 | CVSS3: 7.5 | 18 дней назад | |
| ALT-PU-2026-17464 ALT-PU-2026-17464: package `php8.4` update to version 8.4.26-alt1 | CVSS3: 7.5 | 18 дней назад | |
| ALT-PU-2026-17462 ALT-PU-2026-17462: package `php8.3` update to version 8.3.35-alt1 | CVSS3: 7.5 | 18 дней назад | |
| ALT-PU-2026-17414 ALT-PU-2026-17414: package `php8.5` update to version 8.5.11-alt1 | CVSS3: 7.5 | 18 дней назад | |
 | RLSA-2026:87080 Important: php:7.4 security update | 2 дня назад | ||
| ELSA-2026-87080 ELSA-2026-87080: php:7.4 security update (IMPORTANT) | 3 дня назад |
Уязвимостей на страницу