CVE-2026-7263— DoS attack via DOMNode::C14N()
Possible ATT&CK Techniques 1AI
T1496 · Resource HijackingGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-7263
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
DoS attack via DOMNode::C14N()
Source: NVD (National Vulnerability Database)
Vulnerability Description
In PHP versions 8.4.* before 8.4.21 and 8.5.* before 8.5.6, DOMNode::C14N() method may process the XML data incorrectly, causing a circular linked list in the data structure representing the XML document. This may cause subsequent processing of the XML document to enter infinite loop, causing denial of service in the processing application.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
不恰当的资源关闭或释放
Source: NVD (National Vulnerability Database)
Vulnerability Title
PHP 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
PHP是PHP开源的一种在服务器端执行的脚本语言。 PHP 8.4.21之前版本和8.5.6之前版本存在安全漏洞，该漏洞源于DOMNode::C14N()方法可能错误处理XML数据，导致表示XML文档的数据结构中形成循环链表，后续处理可能进入无限循环，造成拒绝服务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-7263
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-7263
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-7263 (1)
Same Patch Batch · PHP Group · 2026-05-10 · 10 CVEs total
| CVE-2026-7258 | Out-of-bounds read in urldecode() on NetBSD | |
| CVE-2026-7262 | NULL pointer dereference in SOAP apache:Map decoder with missing <value> | |
| CVE-2026-7261 | SoapServer session-persisted object use-after-free via SOAP header fault | |
| CVE-2026-7259 | Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() | |
| CVE-2026-7568 | Signed integer overflow in metaphone() | |
| CVE-2026-6722 | Use-After-Free in SOAP using Apache map | |
| CVE-2026-6735 | XSS within PHP-FPM status endpoint | |
| CVE-2025-14179 | SQL injection in pdo_firebird via NUL bytes in quoted strings | |
| CVE-2026-6104 | Global buffer over-read in mb_convert_encoding() with attacker-supplied encoding |
IV. Related Vulnerabilities
Same product: PHP
- CVE-2026-14355
ext/openssl: Memory corruption in openssl_encrypt with AES-W - CVE-2026-6104
Global buffer over-read in mb_convert_encoding() with attack - CVE-2026-7258
Out-of-bounds read in urldecode() on NetBSD - CVE-2026-6722
Use-After-Free in SOAP using Apache map - CVE-2026-7259
Null pointer dereference in php_mb_check_encoding() via mb_e
Same vendor: PHP Group
- CVE-2026-6104
Global buffer over-read in mb_convert_encoding() with attack - CVE-2026-7258
Out-of-bounds read in urldecode() on NetBSD - CVE-2026-6722
Use-After-Free in SOAP using Apache map - CVE-2026-7259
Null pointer dereference in php_mb_check_encoding() via mb_e - CVE-2026-7261
SoapServer session-persisted object use-after-free via SOAP
Same weakness: CWE-404
- CVE-2026-15276
pdeljanov Symphonia Metadata denial of service - CVE-2026-15274
lo48576 fbxcel Node Header parser.rs denial of service - CVE-2026-59725
Socket.IO: Engine.IO Polling Transport Connection Exhaustion - CVE-2026-14651
connorskees grass visitor denial of service - CVE-2026-14650
connorskees grass UTF-8 Character raw_to_parse_error denial
V. Comments for CVE-2026-7263
No comments yet