CVE-2025-14180

high
Published 2026-01-27 · Modified 2026-02-02
CVSS v3
CVSS v2
VIR risk
8.0

Description

Important: php:8.2 security update

Predictions

Exploit likelihood
20%
Patch ETA

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: alma — https://errata.almalinux.org/8/ALSA-2026-1412.html

vendor Authored 2026-05-27

Vendor advisory: alma — https://access.redhat.com/errata/RHSA-2026:1412

vendor Authored 2026-05-27

Vendor advisory: alma — https://errata.almalinux.org/9/ALSA-2026-1429.html

vendor Authored 2026-05-27

Vendor advisory: debian — https://security-tracker.debian.org/tracker/CVE-2025-14180

vendor Authored 2026-05-27

Vendor advisory: rocky — https://errata.rockylinux.org/RLSA-2026:1429

vendor Authored 2026-05-27

Vendor advisory: rocky — https://errata.rockylinux.org/RLSA-2026:1409

vendor Authored 2026-05-27

Vendor advisory: suse — https://www.suse.com/security/cve/CVE-2025-14180.html

vendor Authored 2026-05-27

Vendor advisory: alma — https://errata.almalinux.org/9/ALSA-2026-1409.html

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2425627

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2425626

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2425625

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2379792

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2378690

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2378689

vendor Authored 2026-05-27

Vendor advisory: redhat — https://access.redhat.com/errata/RHSA-2026:1429

vendor Authored 2026-05-27

Vendor advisory: redhat — https://access.redhat.com/errata/RHSA-2026:1409

vendor Authored 2026-05-27

Vendor advisory: rocky — https://errata.rockylinux.org/RLSA-2026:1412

OS impact

OSVersionStatusFixed in
rockylinux rocky8fixed
redhat rhel9fixed
almalinux almalinux9fixedapcu-panel-5.1.23-1.module_el9.4.0+65+49ff6472.noarch.rpm
suse slesaffected
rockylinux rocky9fixed
debian debianbullseyefixed0
debian debianbookwormfixed8.2.30-1~deb12u1
debian debianforkyfixed8.4.16-1
debian debiansidfixed8.4.16-1
debian debiantrixiefixed8.4.16-1~deb13u1

References

Verify integrity in audit chain (admin only). AS-IS.