CVE-2026-93682 | PHP up to 8.2.33/8.3.34/8.4.25/8.5.10 HTTP Stream Wrapper out-of-bounds

A vulnerability classified as problematic was found in PHP up to 8.2.33/8.3.34/8.4.25/8.5.10. This impacts an unknown function of the component HTTP Stream Wrapper. Executing a manipulation can lead to out-of-bounds read.

This vulnerability is tracked as CVE-2026-93682. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More