Critical Alert 2 Active Exploits Detected Today

CVE-2026-56291 — Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability →
CVE-2026-48939 — iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability →
Powered by CVE Watchtower
×
July 12, 2026

CVE Watchtower


← Back to CVE List

CVE-2026-7263NVD

Vulnerability Summary

In PHP versions 8.4.* before 8.4.21 and 8.5.* before 8.5.6, DOMNode::C14N() method may process the XML data incorrectly, causing a circular linked list in the data structure representing the XML document. This may cause subsequent processing of the XML document to enter infinite loop, causing denial of service in the processing application.
Severity Level
UNKNOWN
Published Date
May 10, 2026
Last Modified
May 11, 2026
Exploitation Status
No confirmed exploitation yet
EPSS Score (30-Day)
0.05%Probability
Root Weakness (CWE)
N/A

External References