PHP 8.3.22
phpevery versioncounted 2026-10-09 03:20 UTC
As of 2026-10-09, 84 hosts ran PHP 8.3.22 with at least one known CVE on a service open at their latest check; 17 distinct CVEs match this version.
Known CVEs on hosts running it
84hosts with known CVEs
17distinct CVEs
A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version.
Not counted: 21 hosts with CVEs of it only from an older observation (software reported earlier, no service of that kind open now).
Most common CVEs
| CVE | Hosts |
|---|---|
| CVE-2025-14179 CRITICAL 9.8 | 145 |
| CVE-2025-14178 HIGH 8.2 | 145 |
| CVE-2025-14180 HIGH 8.2 | 145 |
| CVE-2025-1735 HIGH 7.5 | 145 |
| CVE-2025-1220 MEDIUM 5.3 | 145 |
| CVE-2026-6722 CRITICAL 9.8 | 144 |
| CVE-2026-7261 CRITICAL 9.8 | 144 |
| CVE-2026-7258 HIGH 7.5 | 144 |
| CVE-2026-7262 HIGH 7.5 | 144 |
| CVE-2026-7568 HIGH 7.5 | 144 |
| CVE-2026-7259 MEDIUM 6.5 | 144 |
| CVE-2026-6735 MEDIUM 6.1 | 144 |
| CVE-2025-6491 MEDIUM 5.9 | 144 |
| CVE-2025-14177 MEDIUM 6.3 | 125 |
| CVE-2026-17543 CRITICAL 9.8 | 124 |
| CVE-2026-7260 MEDIUM 5.5 | 124 |
| CVE-2026-14355 MEDIUM 5.3 | 124 |
Hosts: matches on services open at each host's latest check.