HIGH

[NEU] [hoch] Roundcube Webmail: Mehrere Schwachstellen

BSI Germany • May 26, 2026

CRITICAL

Laravel-Lang PHP Packages Compromised to Deliver Cross-Platform Credential Stealer

The Hacker News • May 23, 2026

HIGH

Drupal admins rushing to patch maximum severity SQL injection vulnerability

CSO Online • May 20, 2026

MEDIUM

USN-8272-1: Smarty vulnerability

Ubuntu Security • May 19, 2026

HIGH

[NEU] [mittel] Composer: Schwachstelle ermöglicht Offenlegung von Informationen

BSI Germany • May 13, 2026

MEDIUM

Multiples vulnérabilités dans PHP (11 mai 2026)

CERT-FR (ANSSI) • May 11, 2026

MEDIUM

[NEU] [mittel] Drupal (Obfuscate): Schwachstelle ermöglicht Cross-Site Scripting

BSI Germany • Apr 23, 2026

HIGH

[NEU] [mittel] TYPO3 Core: Schwachstelle ermöglicht Offenlegung von Informationen

BSI Germany • Apr 21, 2026

HIGH

[NEU] [hoch] Composer: Mehrere Schwachstellen ermöglichen Codeausführung

BSI Germany • Apr 15, 2026

CRITICAL

New PHP Composer Flaws Enable Arbitrary Command Execution — Patches Released

The Hacker News • Apr 14, 2026

CRITICAL

CVE-2026-22666: Dolibarr 23.0.0 dol_eval() whitelist bypass -> RCE (full write-up + PoC)

Reddit r/netsec • Apr 13, 2026

HIGH

[webapps] Jumbo Website Manager - Remote Code Execution

Exploit-DB • Apr 09, 2026

CRITICAL

Microsoft Details Cookie-Controlled PHP Web Shells Persisting via Cron on Linux Servers

The Hacker News • Apr 03, 2026

CRITICAL

[NEU] [hoch] Joomla CMS: Mehrere Schwachstellen

BSI Germany • Apr 01, 2026

CRITICAL

[NEU] [hoch] Roundcube: Mehrere Schwachstellen

BSI Germany • Mar 19, 2026

CRITICAL

Perfex CRM: Autologin cookie fed into unserialize() gives unauthenticated RCE

Reddit r/netsec • Mar 16, 2026

HIGH

[UPDATE] [hoch] TYPO3 Core: Mehrere Schwachstellen

BSI Germany • Mar 16, 2026

CRITICAL

Fake Laravel Packages on Packagist Deploy RAT on Windows, macOS, and Linux

The Hacker News • Mar 04, 2026

MEDIUM

DSA-6154-1 php8.2 - security update

Debian Security • Mar 02, 2026

HIGH

PHP Server-Side Request Forgery (SSRF) | Security Vulnerability Database | Sourcery

Web Discovery • Feb 11, 2026

HIGH

PHP Server-Side Request Forgery (SSRF) Vulnerability (CVE-2025-1220) - Web Application Vulnerabilities | Invicti

Web Discovery • Feb 11, 2026

HIGH

Multiple Vulnerabilities in PHP Could Allow for Remote Code Execution

Web Discovery • Feb 11, 2026

MEDIUM

[UPDATE] [hoch] PHP: Mehrere Schwachstellen

BSI Germany • Feb 11, 2026

HIGH

[UPDATE] [hoch] PHP: Mehrere Schwachstellen

BSI Germany • Feb 11, 2026

HIGH

[UPDATE] [hoch] PHP: Mehrere Schwachstellen

BSI Germany • Feb 11, 2026

MEDIUM

NCSC-2026-0050 [1.00] [M/H] Kwetsbaarheid verholpen in PEAR

NCSC Netherlands • Feb 09, 2026

MEDIUM

[UPDATE] [mittel] PHP: Mehrere Schwachstellen

BSI Germany • Feb 05, 2026