{"vulnerability": "CVE-2026-12184", "sightings": [{"uuid": "16eead06-f161-48c2-b025-988fcc2784b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12184", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ms2itu4cr22o", "content": "\u300cPHP\u300d\u306b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u66f4\u65b0 - \u8907\u6570\u306e\u8106\u5f31\u6027\u3092\u4fee\u6b63\n\n\u30d7\u30ed\u30b0\u30e9\u30df\u30f3\u30b0\u8a00\u8a9e\u300cPHP\u300d\u306e\u958b\u767a\u30c1\u30fc\u30e0\u306f\u3001\u8106\u5f31\u6027\u3092\u89e3\u6d88\u3057\u305f\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u516c\u958b\u3057\u305f\u3002\u5404\u30d6\u30e9\u30f3\u30c1\u306e\u5229\u7528\u8005\u306b\u66f4\u65b0\u3092\u547c\u3073\u304b\u3051\u3066\u3044\u308b\u3002\n\n...\n\n\u30d0\u30b0\u306a\u3069\u8907\u6570\u306e\u4fee\u6b63\u3092\u884c\u3063\u3066\u3044\u308b\u304c\u3001\u300cOpenSSL\u300d\u95a2\u9023\u3068\u3057\u3066\u300copenssl_encrypt\u300d\u306b\u304a\u3044\u3066\u300cAES-WRAP-PAD\u300d\u3092\u6271\u3046\u969b\u306b\u30e1\u30e2\u30ea\u7834\u58ca\u304c\u751f\u3058\u308b\u300cCVE-2026-14355\u300d\u306b\u5bfe\u51e6\u3057\u305f\u3002\n\n\u307e\u305f\u300c\u540c8.3.32\u300d\u3067\u306f\u3001\u300cHTTPS URL\u300d\u3092\u30d7\u30ed\u30ad\u30b7\u7d4c\u7531\u3067\u300cfile_get_contents\u300d\u306b\u3088\u308a\u53d6\u5f97\u3059\u308b\u969b\u3001\u7570\u5e38\u7d42\u4e86\u3059\u308b\u8106\u5f31\u6027\u300cCVE-2026-12184\u300d\u306b\u5bfe\u5fdc...", "creation_timestamp": "2026-08-01T22:19:43.716680Z"}, {"uuid": "3ffb33a3-3a7b-49b6-aec1-c3e145781619", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12184", "type": "seen", "source": "https://t.me/pphm_HackerNews/1832", "content": "\ud83d\udd34 PHP TLS Flaw Lets Remote Server Trigger DoS and Crash Entire FPM Process\n\nA newly disclosed high-severity vulnerability in PHP, tracked as CVE-2026-12184, poses a significant risk to web applications by allowing a remotely triggerable denial-of-service (DoS) condition.\n\nThis vulnerability can cause entire PHP-FPM process pools to crash. Details of the issue are outlined in the GitHub advisory GHSA-mhmq-mmqj-2v39. It affects multiple supported PHP branches, including versions before 8.3.32, 8.4.21, and 8.5.6.\n\nThe flaw lies in the HTTP stream-handling logic, specifically in the php_stream_url_wrap_http_ex function.", "creation_timestamp": "2026-08-21T23:00:10.451572Z"}, {"uuid": "e08f32d9-38de-4250-8ab4-214c5300daff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12184", "type": "seen", "source": "https://t.me/pphm_HackerNews/1832", "content": "\ud83d\udd34 PHP TLS Flaw Lets Remote Server Trigger DoS and Crash Entire FPM Process\n\nA newly disclosed high-severity vulnerability in PHP, tracked as CVE-2026-12184, poses a significant risk to web applications by allowing a remotely triggerable denial-of-service (DoS) condition.\n\nThis vulnerability can cause entire PHP-FPM process pools to crash. Details of the issue are outlined in the GitHub advisory GHSA-mhmq-mmqj-2v39. It affects multiple supported PHP branches, including versions before 8.3.32, 8.4.21, and 8.5.6.\n\nThe flaw lies in the HTTP stream-handling logic, specifically in the php_stream_url_wrap_http_ex function.", "creation_timestamp": "2026-08-22T00:00:26.822325Z"}, {"uuid": "fed53794-149b-4de8-851e-d35ac637b413", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12184", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mpx2vw7sur2a", "content": "Two PHP flaws are patched. CVE-2026-12184 is a PHP remote DoS that crashes PHP-FPM, and CVE-2026-14355 causes memory corruption. Update PHP now.\n\n#PHP #RemoteDoS #DoS #PHPFPM #CyberSecurity #Vulnerability #InfoSec", "creation_timestamp": "2026-07-06T02:41:58.101053Z"}, {"uuid": "3af6ba3b-1f6b-4414-89ef-bf5a053e37f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12184", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mq2qypnlfq2i", "content": "\ud83d\udd17 CVE : CVE-2026-12184, CVE-2026-14355", "creation_timestamp": "2026-07-07T13:55:12.466880Z"}, {"uuid": "e4ff9b79-5982-4adc-b0ae-a9ee3a2aee25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12184", "type": "seen", "source": "https://t.me/pphm_HackerNews/1832", "content": "\ud83d\udd34 PHP TLS Flaw Lets Remote Server Trigger DoS and Crash Entire FPM Process\n\nA newly disclosed high-severity vulnerability in PHP, tracked as CVE-2026-12184, poses a significant risk to web applications by allowing a remotely triggerable denial-of-service (DoS) condition.\n\nThis vulnerability can cause entire PHP-FPM process pools to crash. Details of the issue are outlined in the GitHub advisory GHSA-mhmq-mmqj-2v39. It affects multiple supported PHP branches, including versions before 8.3.32, 8.4.21, and 8.5.6.\n\nThe flaw lies in the HTTP stream-handling logic, specifically in the php_stream_url_wrap_http_ex function.", "creation_timestamp": "2026-08-23T00:00:43.408583Z"}]}