Part of a story covered by 21 sources: “PHP2Shell Attacks Started Four Days Before Public Disclosure, AWS Reports” — merged summary and timeline →
Re: CVE-2026-109619: PHP 8.2–8.5 RCE via stale global state
AI summary
Re: CVE-2026-109619: PHP 8.2–8.5 RCE via stale global state
Posted by Goetz T. Fischer on Oct 22 affected is 5.4.0 and all newer ones.
Vulnerabilities mentionedAll →
- CVE-2026-1096199.26%PHP has various global state that temporarily points into request memorypublished · php php PoC ×9
| CVE | Vulnerability | CVSS | EPSS | Flags | Affected | Exposure | Published |
|---|---|---|---|---|---|---|---|
| CVE-2026-109619 | PHP has various global state that temporarily points into request memory |
Full article
Posted by Goetz T. Fischer on Oct 22 affected is 5.4.0 and all newer ones.
This source does not provide full text. Read it at seclists.org.
Hacker News · security