CVE-2026-6735 XSS within PHP-FPM status endpoint Information published. EPSS 0.00 CVE-2026-6735 PHP US Microsoft Security · 2. 6. 10:45