php-cgi

Mentions · 7d1
Mentions · 30d1
All mentions1
First seenOct 22, 2026
Last mentioned3d ago

Timeline

1 articles · newest first

PHP patches two critical unauthenticated RCE flaws

Fixes ship in 8.5.12, 8.4.27, 8.3.36 and 8.2.35; config changes do not fully close exposure.

GBHackersupdated Oct 22, 22:24 UTC · 2d agofirst Oct 22, 05:15 UTC · 3d agoVulnerability 7 sourcesCVE-2026-109618 CVE-2026-1096191 · 1 read

Related CVEs

by mentions

CVE-2026-109619100%9.2
Use-after-free RCE in PHP via stale request globals
published 4d agophpPoC ×13
CVE-2026-10961812%9.2
OOM longjmp memory flaw enabling RCE in PHP
published 4d agophpPoC ×25

Appears with

Apache mod_phpproduct · 1
FrankenPHPproduct · 1
LiteSpeedproduct · 1
PHPvendor · 1
PHP-FPMproduct · 1

Entities are extracted by the model from each article. First seen Oct 22, 2026, last mentioned 3d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.