CVE WATCH / VULNERABILITY DETAIL
CVE-2026-65954
HIGHCVSS 8.6NVD feed
Published 12 October 2026 · tracked since 13 October 2026
Description
PHPCSUtils is a suite of utility functions for use with PHP_CodeSniffer. From 1.0.0-alpha1 until 1.2.3, PHPCSUtils\AbstractSniffs\AbstractArrayDeclarationSniff::getActualArrayKey() evaluates attacker-controlled array-key expressions with eval(), allowing callback-form keys in untrusted PHP code scan
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-104935
- CVE-2026-109573 HIGH 8.1
- CVE-2026-84312 HIGH 7.1
- CVE-2026-41210 MEDIUM 6.5
- CVE-2026-84316 HIGH 8.8
- CVE-2026-84317 HIGH 8.8
- CVE-2026-84318 HIGH 8.8
- CVE-2026-84319 HIGH 8.3
- CVE-2026-84320 MEDIUM 6.3
- CVE-2026-84321 MEDIUM 5.4