CVE-2025-1218

Severity: Low

Published: 2026-09-25

php8.4 - security update

Exploit evidence

Public exploit evidence reported

Last checked: 2026-10-23 16:55 UTC

No exploitation evidence · CISA Coordinator (Assessed 2026-09-28 12:56 UTC)
Exploit reference · [email protected] · View external evidence (Observed 2026-10-23 16:55 UTC)

NVD evidence for CVE-2025-1218 is reported, not independently verified by Package Alert. It does not establish exploit reliability or applicability to a particular package or environment.

References

Fix Status by Distribution

Fix evidence last checked: 2026-10-23 18:48 UTC

Fixed in:

AlmaLinux 8
- ALSA-2026:87080 · Published 2026-10-21
Debian 12 (Bookworm)
- DLA-4819-1 · Published 2026-10-05
Debian 13 (Trixie)
- DSA-6514-1 · Published 2026-09-25
Oracle Linux 8
- ELSA-2026-87080 · Published 2026-10-21
Oracle Linux 9
- ELSA-2026-87151 · Published 2026-10-21
Red Hat Enterprise Linux 8
- RHSA-2026:87080 · Published 2026-10-21
Rocky Linux 8
- RLSA-2026:87080 · Published 2026-10-22
SUSE Linux Enterprise Server 15 SP5
- SUSE-SU-2026:4853 · Published 2026-10-22
- SUSE-SU-2026:4651 · Published 2026-10-13
SUSE Linux Enterprise Server 15 SP6
- SUSE-SU-2026:4853 · Published 2026-10-22
- SUSE-SU-2026:4603 · Published 2026-10-09
SUSE Linux Enterprise Server 15 SP7
- SUSE-SU-2026:4853 · Published 2026-10-22
- SUSE-SU-2026:4602 · Published 2026-10-09
SUSE Linux Enterprise Server 16
- SUSE-SU-2026:24158 · Published 2026-10-07
Ubuntu 22.04 LTS (Jammy Jellyfish)

No fix evidence found:

AlmaLinux 10

AlmaLinux 9

Debian 11 (Bullseye)

Oracle Linux 10

Red Hat Enterprise Linux 10

Red Hat Enterprise Linux 7 (Extended Lifecycle Support)

Red Hat Enterprise Linux 9

Rocky Linux 10

Rocky Linux 9

SUSE Linux Enterprise Server 12 SP5

Ubuntu 25.04 (Plucky Puffin)

Ubuntu 25.10 (Questing Quokka)

Interested in being alerted when these distributions have fixes? Set up an alert.