Skip to content

CVE-2026-7259

CVE

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
July 6, 2026
Last Seen
July 6, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical XSS and Memory Vulnerabilities in Oracle PHP Releases74.0

Oracle has released important security updates for PHP versions 7.4 and 8.0, addressing multiple vulnerabilities including critical cross-site scripting (XSS) flaws and memory management issues. The updates fix CVE-2026-6735, which allows XSS attacks through the status endpoint, and CVE-2026-7259, w...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

CVE-2026-6722CVE-2026-6735CVE-2026-7258CVE-2026-7261CVE-2026-7262CVE-2026-7568Cwe-190 - Integer Overflow Or WraparoundCwe-416 - Use After FreeCwe-476 - NULL Pointer DereferenceCwe-79 - Cross-site Scripting (xss)XSS