NULL pointer dereference vulnerability in Apache Thrift PHP bindings.
This issue affects Apache Thrift: before 0.25.0.
Users are recommended to upgrade to version 0.25.0, which fixes the issue.
Exploit evidence
No public exploit evidence reported by NVD
Last checked: 2026-10-23 15:23 UTC
No exploitation evidence · CISA Coordinator (Assessed 2026-10-02 17:33 UTC)
NVD evidence for CVE-2026-87117 is reported, not independently verified by Package Alert. It does not establish exploit reliability or applicability to a particular package or environment.