CVE-2026-109618 and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP
Imported from official source
On October 21, 2026, the PHP project announced security releases for two critical vulnerabilities in PHP. CVE-2026-109618 can corrupt memory during out-of-memory (OOM) handling, while CVE-2026-109619 is a use-after-free flaw involving state retained between requests. …
This version
- Version
- 1 of 2
- Recorded
- October 21, 2026 16:01
- Change
- Initial
- Content hash
697e8d5c92c8a86c3e23f6ba7d824da2- All versions
- Revision history