Logo
vulnerabilityCVE-2026-17543
Name
CVE-2026-17543
Source
NVD ( link)Debian ( link)
Description
Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9.
Published Date
Updated Date
Workaround
-

Analysis#


Affected Component
Analysis
php8
Exploitable

Vulnerability Ratings#


8.1
CVSSv4
9.8
CVSSv31
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
2025.02.x
8.3.33
Not Affected
buildroot
master
8.5.9
Not Affected
openwrt
master
8.4.23-r1
Exploitable
yocto
kirkstone
8.1.34
Not Affected
yocto
master
8.5.9
Not Affected
yocto
scarthgap
8.2.33
Not Affected