RHSA-2026:1409: apcu-panel Red Hat

CVSS: 7.5v3.1HighPublished

Published 28-01-2026Last modified 23-07-2026

Open JSON

Vulnerability summary

RHSA-2026:1409 is a high (CVSS 7.5) vulnerability in apcu-panel Red Hat.

Overall risk

30/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.5/10

010

High · v3.1 (OSV · Red hat), selected by version preference

EPSS score

Not scored

0%100%

No EPSS score yet

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 6 · Downstream 0

CVE-2025-1220 CVE-2025-14177 CVE-2025-14178 CVE-2025-14180 CVE-2025-1735 CVE-2025-6491

Timeline

28-01-2026
PublishedVulnerability first disclosed.
23-07-2026
Last modifiedVulnerability information updated.

Description

Red Hat Security Advisory: php:8.2 security update

CVSS metrics

1 score · 1 source · 1 version

v3.17.5

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Redhat64 products

apcu-panel< 0:5.1.23-1.module+el9.4.0+20748+b46899d2
php< 0:8.2.30-1.module+el9.7.0+23849+7b831f17
php-bcmath< 0:8.2.30-1.module+el9.7.0+23849+7b831f17
php-bcmath-debuginfo< 0:8.2.30-1.module+el9.7.0+23849+7b831f17
php-cli< 0:8.2.30-1.module+el9.7.0+23849+7b831f17

php-cli-debuginfo< 0:8.2.30-1.module+el9.7.0+23849+7b831f17
php-common< 0:8.2.30-1.module+el9.7.0+23849+7b831f17
php-common-debuginfo< 0:8.2.30-1.module+el9.7.0+23849+7b831f17
php-dba< 0:8.2.30-1.module+el9.7.0+23849+7b831f17
php-dba-debuginfo< 0:8.2.30-1.module+el9.7.0+23849+7b831f17
php-dbg< 0:8.2.30-1.module+el9.7.0+23849+7b831f17
php-dbg-debuginfo< 0:8.2.30-1.module+el9.7.0+23849+7b831f17
php-debuginfo< 0:8.2.30-1.module+el9.7.0+23849+7b831f17
php-debugsource< 0:8.2.30-1.module+el9.7.0+23849+7b831f17
php-devel< 0:8.2.30-1.module+el9.7.0+23849+7b831f17
php-embedded< 0:8.2.30-1.module+el9.7.0+23849+7b831f17
php-embedded-debuginfo< 0:8.2.30-1.module+el9.7.0+23849+7b831f17
php-enchant< 0:8.2.30-1.module+el9.7.0+23849+7b831f17
php-enchant-debuginfo< 0:8.2.30-1.module+el9.7.0+23849+7b831f17
php-ffi< 0:8.2.30-1.module+el9.7.0+23849+7b831f17
php-ffi-debuginfo< 0:8.2.30-1.module+el9.7.0+23849+7b831f17
php-fpm< 0:8.2.30-1.module+el9.7.0+23849+7b831f17
php-fpm-debuginfo< 0:8.2.30-1.module+el9.7.0+23849+7b831f17
php-gd< 0:8.2.30-1.module+el9.7.0+23849+7b831f17
php-gd-debuginfo< 0:8.2.30-1.module+el9.7.0+23849+7b831f17
php-gmp< 0:8.2.30-1.module+el9.7.0+23849+7b831f17
php-gmp-debuginfo< 0:8.2.30-1.module+el9.7.0+23849+7b831f17
php-intl< 0:8.2.30-1.module+el9.7.0+23849+7b831f17
php-intl-debuginfo< 0:8.2.30-1.module+el9.7.0+23849+7b831f17
php-ldap< 0:8.2.30-1.module+el9.7.0+23849+7b831f17
php-ldap-debuginfo< 0:8.2.30-1.module+el9.7.0+23849+7b831f17
php-mbstring< 0:8.2.30-1.module+el9.7.0+23849+7b831f17
php-mbstring-debuginfo< 0:8.2.30-1.module+el9.7.0+23849+7b831f17
php-mysqlnd< 0:8.2.30-1.module+el9.7.0+23849+7b831f17
php-mysqlnd-debuginfo< 0:8.2.30-1.module+el9.7.0+23849+7b831f17
php-odbc< 0:8.2.30-1.module+el9.7.0+23849+7b831f17
php-odbc-debuginfo< 0:8.2.30-1.module+el9.7.0+23849+7b831f17
php-opcache< 0:8.2.30-1.module+el9.7.0+23849+7b831f17
php-opcache-debuginfo< 0:8.2.30-1.module+el9.7.0+23849+7b831f17
php-pdo< 0:8.2.30-1.module+el9.7.0+23849+7b831f17
php-pdo-debuginfo< 0:8.2.30-1.module+el9.7.0+23849+7b831f17
php-pecl-apcu< 0:5.1.23-1.module+el9.4.0+20748+b46899d2
php-pecl-apcu-debuginfo< 0:5.1.23-1.module+el9.4.0+20748+b46899d2
php-pecl-apcu-debugsource< 0:5.1.23-1.module+el9.4.0+20748+b46899d2
php-pecl-apcu-devel< 0:5.1.23-1.module+el9.4.0+20748+b46899d2
php-pecl-rrd< 0:2.0.3-4.module+el9.4.0+20748+b46899d2
php-pecl-rrd-debuginfo< 0:2.0.3-4.module+el9.4.0+20748+b46899d2
php-pecl-rrd-debugsource< 0:2.0.3-4.module+el9.4.0+20748+b46899d2
php-pecl-xdebug3< 0:3.2.2-2.module+el9.4.0+20796+bd4564df
php-pecl-xdebug3-debuginfo< 0:3.2.2-2.module+el9.4.0+20796+bd4564df
php-pecl-xdebug3-debugsource< 0:3.2.2-2.module+el9.4.0+20796+bd4564df
php-pecl-zip< 0:1.22.3-1.module+el9.4.0+20748+b46899d2
php-pecl-zip-debuginfo< 0:1.22.3-1.module+el9.4.0+20748+b46899d2
php-pecl-zip-debugsource< 0:1.22.3-1.module+el9.4.0+20748+b46899d2
php-pgsql< 0:8.2.30-1.module+el9.7.0+23849+7b831f17
php-pgsql-debuginfo< 0:8.2.30-1.module+el9.7.0+23849+7b831f17
php-process< 0:8.2.30-1.module+el9.7.0+23849+7b831f17
php-process-debuginfo< 0:8.2.30-1.module+el9.7.0+23849+7b831f17
php-snmp< 0:8.2.30-1.module+el9.7.0+23849+7b831f17
php-snmp-debuginfo< 0:8.2.30-1.module+el9.7.0+23849+7b831f17
php-soap< 0:8.2.30-1.module+el9.7.0+23849+7b831f17
php-soap-debuginfo< 0:8.2.30-1.module+el9.7.0+23849+7b831f17
php-xml< 0:8.2.30-1.module+el9.7.0+23849+7b831f17
php-xml-debuginfo< 0:8.2.30-1.module+el9.7.0+23849+7b831f17

Show all 64

1 vendor · 64 products

References

33 links

Show all 33 references

www.cve.org/CVERecord?id=CVE-2025-1220Advisory
nvd.nist.gov/vuln/detail/CVE-2025-1220Advisory
github.com/php/php-src/security/advisories/GHSA-3cr5-j632-f35rARTICLE
access.redhat.com/security/cve/CVE-2025-1735REPORT
www.cve.org/CVERecord?id=CVE-2025-1735Advisory
nvd.nist.gov/vuln/detail/CVE-2025-1735Advisory
github.com/php/php-src/security/advisories/GHSA-hrwm-9436-5mv3ARTICLE
access.redhat.com/security/cve/CVE-2025-6491REPORT
www.cve.org/CVERecord?id=CVE-2025-6491Advisory
nvd.nist.gov/vuln/detail/CVE-2025-6491Advisory
github.com/php/php-src/security/advisories/GHSA-453j-q27h-5p8xARTICLE
access.redhat.com/security/cve/CVE-2025-14177REPORT
www.cve.org/CVERecord?id=CVE-2025-14177Advisory
nvd.nist.gov/vuln/detail/CVE-2025-14177Advisory
github.com/php/php-src/security/advisories/GHSA-3237-qqm7-mfv7ARTICLE
access.redhat.com/security/cve/CVE-2025-14178REPORT
www.cve.org/CVERecord?id=CVE-2025-14178Advisory
nvd.nist.gov/vuln/detail/CVE-2025-14178Advisory
github.com/php/php-src/security/advisories/GHSA-h96m-rvf9-jgm2ARTICLE
access.redhat.com/security/cve/CVE-2025-14180REPORT
www.cve.org/CVERecord?id=CVE-2025-14180Advisory
nvd.nist.gov/vuln/detail/CVE-2025-14180Advisory
github.com/php/php-src/security/advisories/GHSA-8xr5-qppj-gvwjARTICLE