CVE-2026-14355

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

July 6, 2026

Last Seen

October 24, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical PHP Vulnerabilities Enable DoS Attacks on Web Applications74.0

Two critical vulnerabilities in PHP, CVE-2026-12184 and CVE-2026-14355, have been disclosed, posing significant risks to web applications. CVE-2026-12184 allows attackers to trigger denial-of-service (DoS) conditions by exploiting flaws in PHP's HTTP stream-handling logic during TLS initialization f...

Critical SQL Injection and C Stack Exhaustion Vulnerabilities in openSUSE PHP72.9

Recent updates for openSUSE PHP versions 7 and 8 have revealed critical vulnerabilities, including SQL injection and C stack exhaustion issues. Specifically, CVE-2026-17543 allows for SQL injection through improper escaping of user-provided parameters in `ext-pgsql`, while CVE-2026-7260 can lead to...

Critical PHP Vulnerabilities in Ubuntu 26.04 LTS Lead to Denial of Service Risks72.0

On July 20, 2026, multiple vulnerabilities in PHP were disclosed, affecting Ubuntu 26.04 LTS. The vulnerabilities include a NULL pointer dereference (CVE-2026-12184) and a buffer allocation flaw in the OpenSSL extension (CVE-2026-14355). Both issues could lead to denial of service attacks or potenti...