Vulnerability
Published 2026-10-26 New
Verified 2026-10-24
PHP Group PHP (CVE-2026-109618)
PHP Memory Corruption Vulnerability. PHP contains an out-of-memory corruption vulnerability that allows for unauthenticated remote code execution. Apply vendor mitigations.
Check the NVD record and the vendor advisory for affected versions and the patch.
- Product
- PHP Group PHP
- Exploited in Australia?
- unknown
- Primary: NVD
- Vendor: CISA KEV
- CVE: CVE-2026-109618
