PHP 7 Archives - TuxCare

Check the status of CVEs. Learn More.

 CVE Status (opens in new tab)

php2shell patches (CVE-2026-109618 and CVE-2026-109619) for EOL PHP are out now. With sales replies slower than usual due to high demand, the fastest route to patched packages is to buy ELS for Runtimes online (opens in new tab). Read the patch FAQ

Blog Series

PHP 7

PHP 7 Vulnerable to Severe...

Executive Summary   Our security research team has discovered that CVE-2022-31631, a critical SQL injection vulnerability with a CVSS 3 score of 9.1, affects PHP 7 installations (on Windows and...

CVE-2023-3824: PHP 7 Users Unknowingly...

Executive Summary   CVE-2023-3824, a buffer overflow vulnerability in PHP’s PHAR extension, also impacts PHP 7 installations though official advisories only mention PHP 8+ versions. This vulnerability is particularly concerning...

Beyond EOL: PHP 7 Vulnerability...

Executive Summary Our security research team has discovered that CVE-2023-0568, a buffer allocation vulnerability officially reported to affect only PHP 8+ versions, also impacts PHP 7 series installations (on Windows...

Surviving PHP 7 End of...

According to W3Techs.com, more than 50% of all the PHP websites still use PHP 7 versions. Each PHP release branch has three years of support: 2 years of active support...