Unverified50% confidenceFactExact time
PHP has two high-severity vulnerabilities, both with a CVSS v4.0 score of 9.2, affecting the 8.4.27 and 8.5.2 branches.
1
Sources
50%
Confidence
Short-term (~14 days)
Relevance
10/25/2026
First Seen
Valid until: 11/8/2026
Sources
Related Entities
Related Claims
VerifiedUnder the CVSS scoring standard, scores of 7.0–8.9 are classified as high severity and 9.0–10.0 as critical, and the standard is maintained by the FIRST organization.68% similarUnverifiedPHP 8.x minor versions introduce new deprecation warnings (such as dynamic properties and undefined variables), and these warnings may become errors in 9.0.66% similarUnverifiedMaking major changes at the PHP engine layer means the changes touch underlying behavior shared by all PHP applications, which is far riskier than fixing some extension or framework code.64% similarUnverified此类认证后门漏洞在CVSS 3.x评分体系中通常被评定为9.8分左右的严重等级62% similarUnverified在CVSS评分体系中，本地提权漏洞通常获得7.0–8.8分的高危评级59% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1096008API
curl https://kongchang.com/api/v1/knowledge/claims/1096008MCP
get_claim(id=1096008)