VYPR

soap extension

by PHP

CVEs (1)

  • CVE-2026-6722CriMay 10, 2026
    risk 0.57cvss 9.8epss 0.01

    In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the SOAP extension's object deduplication mechanism stores pointers to PHP objects in a global map without incrementing their reference counts. When an apache:Map node…