Part of a story covered by 21 sources: “PHP2Shell Attacks Started Four Days Before Public Disclosure, AWS Reports” — merged summary and timeline →
Re: CVE-2026-109619: PHP 8.2–8.5 RCE via stale global state
AI summary
Re: CVE-2026-109619: PHP 8.2–8.5 RCE via stale global state
Posted by Jakub Zelenka on Oct 22 Hi, This is unrelated issue with minimal impact (crash in one component in slightly unlikely scenario). It has nothing to do with the RCE. Kind regards, Jakub
Vulnerabilities mentionedAll →
- CVE-2026-1096199.26%PHP has various global state that temporarily points into request memorypublished · php php PoC ×9
| CVE | Vulnerability | CVSS | EPSS | Flags | Affected | Exposure | Published |
|---|---|---|---|---|---|---|---|
| CVE-2026-109619 | PHP has various global state that temporarily points into request memory |
Full article
Posted by Jakub Zelenka on Oct 22 Hi, This is unrelated issue with minimal impact (crash in one component in slightly unlikely scenario). It has nothing to do with the RCE. Kind regards, Jakub
This source does not provide full text. Read it at seclists.org.
Hacker News · security