Critical XSS and Memory Vulnerabilities in Oracle PHP Releases
ID: 94529c63-c6f3-5873-8a65-bf98603aadf5
STIX ID: report--94529c63-c6f3-5873-8a65-bf98603aadf5
Feed Name: ThreatCluster
Threat Score
Oracle published security updates for PHP 7.4 and 8.0 on Oracle Linux 8 and 9 that fix multiple CVEs — notably a critical XSS (CVE-2026-6735) and several memory management flaws (including CVE-2026-7259); administrators are urged to apply patches immediately to reduce the risk of unauthorized access or data breaches.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.