PHP Group
3 PHP Group flaws are on CISA's list of vulnerabilities attackers have used, 2 of them added in 2026. CISA says 1 is known to be used by ransomware. The latest was added Oct 26, 2026.
3on CISA's list, all time
2added in 2026
2in the last 90 days
1used by ransomware
3zero-days, all time
Exploited flaws added each year
Most-hit products
| Product | Exploited flaws | Most recent |
|---|---|---|
| PHP | 3 | Oct 26, 2026 |
Latest PHP Group flaws
- PHPPHP Memory Corruption Vulnerability
- PHPPHP Stale Internal Request-State Vulnerability
- PHPPHP-CGI OS Command Injection Vulnerability
Counts come from CISA's Known Exploited Vulnerabilities catalog, which lists flaws with reliable evidence of real attacks. A higher count often reflects how widely a vendor's products are used and targeted, not only how secure they are.