CVE-2026-17543

Published Jul 30, 2026·Updated Aug 5, 2026

NVD Description

Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9.

Public Exploits & PoCs1 found

[POC] GHSA-8gj2-2cvc-6xx7 — CVE-2026-17543-PHP-Exposure-Validator

Safe PowerShell validator for PHP CVE-2026-17543 exposure via HTTP headers and non-destructive login-form probes.

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Start monitoring free