ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode
Ubuntu Security Noticespublished ()ingested 1
Part of a story covered by 13 sources: “Ubuntu patches nine advisories across Perl, FFmpeg, .NET, Netty, glibc, PHP, Python, Beets and Apache, then refreshes 24.04.5 LTS install media” — merged summary and timeline →

USN-8743-1: PHP vulnerabilities

mediumAdvisoryimportance 28CVE-2026-17543CVE-2026-17544CVE-2026-7260
AI summary · glm-5.3-flash

Ubuntu fixes three PHP flaws, including SQL injection in the PostgreSQL extension (CVE-2026-17543) and an out-of-bounds write in bccomp().

Ubuntu Security Notice USN-8743-1 patches three vulnerabilities in PHP. CVE-2026-17543 involves incorrect backslash escaping in the PostgreSQL extension enabling SQL injection. CVE-2026-17544 is an out-of-bounds write in bccomp() that could cause denial of service or arbitrary code execution on Ubuntu 26.04 LTS, and CVE-2026-7260 causes unbounded recursion via circular symlinks in phar archives.

  • CVE-2026-17543: SQL injection via mishandled backslash escaping in PHP PostgreSQL extension
  • CVE-2026-17544: out-of-bounds write in bccomp(), may allow DoS or code execution
  • CVE-2026-7260: unbounded recursion from circular symlinks in phar archives causes DoS
  • Fixes delivered through Ubuntu security update USN-8743-1
Read the original
VendorsCanonicalUbuntuPHP
ProductsPHPPostgreSQL extension
Tagsphpubuntupostgresqlsql-injectionout-of-bounds-writedenial-of-servicephar

Vulnerabilities mentionedAll →

CVEVulnerabilityCVSSEPSSFlagsAffectedExposurePublished
CVE-2026-17544
+2 in the same advisory: …17543 …7260
Attacker-provided inputs to bccomp() could lead to an out-of-bounds write with stack and heap corruption in PHP versions from 8.4.* before 8.4.24 and from 8.5.*

Attacker-provided inputs to bccomp() could lead to an out-of-bounds write with stack and heap corruption in PHP versions from 8.4.* before 8.4.24 and from 8.5.* before 8.5.9.

NVD description · AI analysis pending		8.1
group max
<1%
  • php php
—
Full article

It was discovered that PHP incorrectly handled backslash escaping in the PostgreSQL extension. An attacker could use this issue to perform SQL injection attacks. (CVE-2026-17543) It was discovered that PHP incorrectly handled certain inputs to the bccomp() function. An attacker could use this issue to cause an out-of- bounds write, resulting in a denial of service or possibly execute arbitrary code. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-17544) It was discovered that PHP incorrectly handled circular symbolic links in phar archives. An attacker could use this issue to cause unbounded recursion, resulting in a denial of service. (CVE-2026-7260)

This source does not provide full text. Read it at ubuntu.com.