CVE-2026-7260 | PHP Group up to 8.2.32/8.3.32/8.4.23/8.5.8 phar recursion (EUVD-2026-51092)

July 30, 2026 Yanac

A vulnerability classified as problematic has been found in PHP Group PHP up to 8.2.32/8.3.32/8.4.23/8.5.8. This impacts an unknown function of the component phar. Performing a manipulation results in uncontrolled recursion.

This vulnerability is cataloged as CVE-2026-7260. It is possible to initiate the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More