Linuxsecurity Moderate Stack Overflow Vulnerability in php7 Affects SUSE and openSUSE
Article Content
- •CVE-2026-7260 is a moderate stack overflow vulnerability in php7.
- •Affected systems include SUSE Linux Enterprise and openSUSE distributions.
- •Patches were released on September 11, 2026, following the CVE publication on July 30, 2026.
A moderate stack overflow vulnerability, identified as CVE-2026-7260, has been reported in php7, specifically affecting systems with circular symlinks in phar files. This vulnerability allows for potential exploitation, impacting SUSE Linux Enterprise Server and openSUSE users. The vulnerability has a CVSS score of 4.0, indicating a moderate severity level. Users are advised to apply patches immediately to mitigate risks. The vulnerability was published on July 30, 2026, and has been addressed in updates released on September 11, 2026. Additional changes in the patch allow for the removal of apache2-mod_php7 even if the module is not enabled. Administrators are encouraged to follow SUSE's recommended installation methods for applying the updates. The updates are available for various SUSE products including SAP Applications and High Performance Computing versions.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track CVE-2026-7260 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
PHP2Shell Attack Chain Compromises 25 Servers in U.S. Government Environment Dream reported a PHP2Shell attack chain that compromised 25 servers, including those in a U.S. government-affiliated environment. The investigation revealed that an exposed firewall management interface allowed attackers to access internal identity infrastructure. The attack utilized PHP2Shell (CVE-2026-109618 and…