PHP 7.1.26
phpevery versioncounted 2026-10-08 03:20 UTC
As of 2026-10-08, 80 hosts ran PHP 7.1.26 with at least one known CVE on a service open at their latest check; 21 distinct CVEs match this version.
Known CVEs on hosts running it
80hosts with known CVEs
21distinct CVEs
A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version.
Not counted: 6 hosts with CVEs of it only from an older observation (software reported earlier, no service of that kind open now).
Most common CVEs
| CVE | Hosts |
|---|---|
| CVE-2019-11043 CRITICAL 9.8 known exploited | 80 |
| CVE-2017-8923 CRITICAL 9.8 | 80 |
| CVE-2019-13224 CRITICAL 9.8 | 80 |
| CVE-2019-9641 CRITICAL 9.8 | 80 |
| CVE-2019-11034 CRITICAL 9.1 | 80 |
| CVE-2019-11035 CRITICAL 9.1 | 80 |
| CVE-2019-11036 CRITICAL 9.1 | 80 |
| CVE-2019-11039 CRITICAL 9.1 | 80 |
| CVE-2019-11040 CRITICAL 9.1 | 80 |
| CVE-2019-9675 HIGH 8.1 | 80 |
| CVE-2019-9637 HIGH 7.5 | 80 |
| CVE-2019-9638 HIGH 7.5 | 80 |
| CVE-2019-9639 HIGH 7.5 | 80 |
| CVE-2019-9640 HIGH 7.5 | 80 |
| CVE-2019-11041 HIGH 7.1 | 80 |
| CVE-2019-11042 HIGH 7.1 | 80 |
| CVE-2022-31629 MEDIUM 6.5 | 80 |
| CVE-2022-31628 MEDIUM 5.5 | 80 |
| CVE-2022-4900 MEDIUM 5.5 | 80 |
| CVE-2019-11038 MEDIUM 5.3 | 80 |
| CVE-2024-3566 CRITICAL 9.8 | 12 |
Hosts: matches on services open at each host's latest check.