Part of a story covered by 21 sources: “'PHP2Shell' Bugs Signal Red Alert for Security Industry” — merged summary and timeline →
Re: CVE-2026-109619: PHP 8.2–8.5 RCE via stale global state
AI summary
Re: CVE-2026-109619: PHP 8.2–8.5 RCE via stale global state
Posted by Yves-Alexis Perez on Oct 21 @elise also sayd it seems like a *different* vulnerability: https://fedi.katze.sh/@elise/117478655339557825
Vulnerabilities mentionedAll →
- CVE-2026-1096199.26%PHP has various global state that temporarily points into request memorypublished · php php PoC ×7
| CVE | Vulnerability | CVSS | EPSS | Flags | Affected | Exposure | Published |
|---|---|---|---|---|---|---|---|
| CVE-2026-109619 | PHP has various global state that temporarily points into request memory |
Full article
Posted by Yves-Alexis Perez on Oct 21 @elise also sayd it seems like a *different* vulnerability: https://fedi.katze.sh/@elise/117478655339557825
This source does not provide full text. Read it at seclists.org.
Akamai Blog