CVE-2014-8731: PHPMemcachedAdmin 1.2.2 and earlier allows remote attackers to execute arbitrary PHP code via vectors relat...

Security readout for executives and security teams

PHPMemcachedAdmin 1.2.2 and earlier can allow a remote attacker to make the application create PHP code in the webroot, leading to server-side code execution. For leaders, treat this as serious where the tool is reachable, because compromise could affect the host running the admin interface. Exposure is most likely on systems running phpMemcachedAdmin 1.2.2 or earlier, especially if the interface is reachable from untrusted networks. The bundled affected-product metadata is incomplete, so inventory should use application name and version rather than CPE data. Prioritize investigation for any reachable instance. The business risk is potential host compromise from an admin utility, but urgency depends on whether phpMemcachedAdmin is deployed, exposed, and running an affected version. Mitigation focus: Identify and remove or isolate phpMemcachedAdmin 1.2.2 and earlier instances.; Check project or vendor guidance; sources do not name a fixed release.; Restrict access to trusted admin networks or VPN users only..

Prepared

Jun 13, 2026, 05:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.