# PHP patches multiple unspecified vulnerabilities

Published: 2026-07-07 · Severity: medium
Canonical: https://vorant.io/reports/de3549fe-b9d6-5c23-8949-863e641d58a6/php-patches-multiple-unspecified-vulnerabilities

> ANSSI advises patching PHP 8.2, 8.3, 8.4, and 8.5 branches to fix multiple vulnerabilities of unspecified impact.

France's CERT-FR issued an advisory covering multiple vulnerabilities in PHP affecting versions prior to 8.2.32, 8.3.32, 8.4.23, and 8.5.8. The vendor has not specified the exact nature or impact of the security issues, only that they could allow an attacker to cause an unspecified security problem.

## Mentioned in this report

- Vulnerabilities: CVE-2026-12184, CVE-2026-14355

Source reporting: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0843

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/de3549fe-b9d6-5c23-8949-863e641d58a6/php-patches-multiple-unspecified-vulnerabilities.
Full IOC sets, deployable detections, the entity graph, TAXII 2.1 feed and real-time alerts: https://vorant.io/signup