Tag: PHP

Posts tagged “PHP”

Oct 22, 2026 · adswds team · Security
The next request on the same worker: PHP CVE-2026-109619
PHP’s second critical issue on 21 Oct 2026, CVE-2026-109619 (CVSS 4.0 9.2): request memory is freed while the worker still holds global state. Session upload-progress RCE is validated on mod_php and FPM.
Oct 21, 2026 · adswds team · Security
PHP out-of-memory can become unauthenticated RCE: CVE-2026-109618
PHP advisory, 21 Oct 2026: CVE-2026-109618 (CVSS 4.0 9.2) lets OOM interrupt a half-initialized request. Unauthenticated RCE is demonstrated on mod_php. Fixed in 8.5.12, 8.4.27, 8.3.36, and 8.2.35.