CyberStack 
https://cyberstack.org/n/cve-2026-109619
Vulnerability
Published 2026-10-26 New
Verified 2026-10-24

PHP Group PHP (CVE-2026-109619)

PHP Stale Internal Request-State Vulnerability. PHP contains a stale internal request-state vulnerability that allows for unauthenticated remote code execution. Apply vendor mitigations.

Check the NVD record and the vendor advisory for affected versions and the patch.

Product
PHP Group PHP
Exploited in Australia?
unknown

vulnerabilities