CyberRota
Back to database

CVE-2026-7259

MEDIUM · CVSS 6.5 EPSS 0.08% Public Exploit

Source: NVD + CISA KEV + EPSS · Published: 2026-05-10 · Last synced: 2026-06-09

CyberRota Analysis

Detaylı analiz gerekiyor.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit
GitHub PoC Links

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-7259
Severity
MEDIUM
CVSS
6.5
EPSS
0.08%

Original NVD Description

In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, a mismatch between encoding lists in Oniguruma and mbfl leads to  a NULL pointer dereference, resulting in a segmentation fault and denial of service. The vulnerability is exploitable when user-controlled input can influence the encoding passed to mb_regex_encoding().