CVE-2026-91765

Severity: Important

Published: 2026-09-25

php8.4 - security update

Exploit evidence

Public exploit evidence reported

Last checked: 2026-10-23 14:50 UTC

No exploitation evidence · CISA Coordinator (Assessed 2026-09-28 12:56 UTC)
Exploit reference · [email protected] · View external evidence (Observed 2026-10-23 14:50 UTC)

NVD evidence for CVE-2026-91765 is reported, not independently verified by Package Alert. It does not establish exploit reliability or applicability to a particular package or environment.

References

Fix Status by Distribution

Fix evidence last checked: 2026-10-24 01:59 UTC

Fixed in:

AlmaLinux 10
- ALSA-2026:87071 · Published 2026-10-22
- ALSA-2026:87070 · Published 2026-10-22
AlmaLinux 8
- ALSA-2026:87080 · Published 2026-10-21
- ALSA-2026:87073 · Published 2026-10-21
AlmaLinux 9
- ALSA-2026:87151 · Published 2026-10-22
- ALSA-2026:87079 · Published 2026-10-22
- ALSA-2026:87072 · Published 2026-10-22
Debian 12 (Bookworm)
- DLA-4819-1 · Published 2026-10-05
Debian 13 (Trixie)
- DSA-6514-1 · Published 2026-09-25
Oracle Linux 10
- ELSA-2026-87071 · Published 2026-10-21
- ELSA-2026-87070 · Published 2026-10-21
Oracle Linux 8
- ELSA-2026-87073 · Published 2026-10-22
- ELSA-2026-87080 · Published 2026-10-21
Oracle Linux 9
- ELSA-2026-87079 · Published 2026-10-22
- ELSA-2026-87072 · Published 2026-10-22
- ELSA-2026-87151 · Published 2026-10-21
Red Hat Enterprise Linux 10
- RHSA-2026:87071 · Published 2026-10-21

No fix evidence found:

Debian 11 (Bullseye)

Red Hat Enterprise Linux 7 (Extended Lifecycle Support)

SUSE Linux Enterprise Server 12 SP5

Ubuntu 25.04 (Plucky Puffin)

Ubuntu 25.10 (Questing Quokka)

Interested in being alerted when these distributions have fixes? Set up an alert.