Skip to content

CVE-2026-12184

CVE

Threat entity extracted from intelligence sources

Frequency
4
occurrences
First Seen
July 6, 2026
Last Seen
July 20, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Two critical vulnerabilities in PHP, CVE-2026-12184 and CVE-2026-14355, have been disclosed, posing significant risks to web applications. CVE-2026-12184 allows attackers to trigger denial-of-service (DoS) conditions by exploiting flaws in PHP's HTTP stream-handling logic during TLS initialization f...

On July 20, 2026, multiple vulnerabilities in PHP were disclosed, affecting Ubuntu 26.04 LTS. The vulnerabilities include a NULL pointer dereference (CVE-2026-12184) and a buffer allocation flaw in the OpenSSL extension (CVE-2026-14355). Both issues could lead to denial of service attacks or potenti...

Public Exploits

Checking GitHub for proof-of-concept code…