CISA KEV lists PHP request-state flaw enabling unauthenticated RCE
CVE-2026-109619 is a stale internal request-state bug; the federal remediation due date is October 29.
1
Stories per day · 30 days
1 stories, newest first · one card per story
1 stories, newest first · one card per story
CVE-2026-109619 is a stale internal request-state bug; the federal remediation due date is October 29.
Today 342 readers · 367 views · 287 reads · all time 158K views