CVE-2026-109618 and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP
Imported from official source
On October 21, 2026, the PHP project announced security releases for two critical vulnerabilities in PHP. CVE-2026-109618 can corrupt memory during out-of-memory (OOM) handling, while CVE-2026-109619 is a use-after-free flaw involving state retained between requests. …
This version
- Version
- 2 of 2
- Recorded
- October 22, 2026 16:02
- Change
- Imported change
- Content hash
17fa38c965d5de01b0f2eb5ba0a9251e- All versions
- Revision history