Re: CVE-2026-109619: PHP 8.2–8.5 RCE via stale global state
Re: CVE-2026-109619: PHP 8.2–8.5 RCE via stale global state
Posted by Markus Gschwendt on Oct 22 ... https://www.wiz.io/blog/php2shell-php-rce#overview-2 "Nearly every PHP version is affected by at least one of these issues, including releases dating back to PHP 5.4. The vulnerabilities can allow unauthenticated attackers to execute code on affected servers or read sensitive process memory. That memory may contain passwords, authentication tokens,...
Vulnerabilities mentionedAll →
- CVE-2026-1096199.26%PHP has various global state that temporarily points into request memorypublished · php php PoC ×9
| CVE | Vulnerability | CVSS | EPSS | Flags | Affected | Exposure | Published |
|---|---|---|---|---|---|---|---|
| CVE-2026-109619 | PHP has various global state that temporarily points into request memory |
Posted by Markus Gschwendt on Oct 22 ... https://www.wiz.io/blog/php2shell-php-rce#overview-2 "Nearly every PHP version is affected by at least one of these issues, including releases dating back to PHP 5.4. The vulnerabilities can allow unauthenticated attackers to execute code on affected servers or read sensitive process memory. That memory may contain passwords, authentication tokens,...
This source does not provide full text. Read it at seclists.org.
Hacker News · security