Logo
vulnerabilityCVE-2026-7263
Name
CVE-2026-7263
Source
NVD ( link)Debian ( link)
Description
In PHP versions 8.4.* before 8.4.21 and 8.5.* before 8.5.6, DOMNode::C14N() method may process the XML data incorrectly, causing a circular linked list in the data structure representing the XML document. This may cause subsequent processing of the XML document to enter infinite loop, causing denial of service in the processing application.
Published Date
Updated Date
Workaround
-

Analysis#


Affected Component
Analysis
php8
Exploitable

Vulnerability Ratings#


6.3
CVSSv4
7.5
CVSSv31
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
2025.02.x
8.3.31
Not Affected
buildroot
master
8.5.7
Not Affected
openwrt
openwrt-25.12
8.4.21-r1
Not Affected
yocto
kirkstone
8.1.34
Not Affected
yocto
master
8.5.7
Not Affected
yocto
scarthgap
8.2.31
Not Affected