CISA KEV12 days ago

Actively exploited: PHP Group PHP (CVE-2026-109619)

PHP contains a stale internal request-state vulnerability that allows for unauthenticated remote code execution.

Published October 26, 2026 · 12:00 PM
PHP contains a stale internal request-state vulnerability that allows for unauthenticated remote code execution.
Read

Source: CISA KEV

Ask AI about this articleBeta

The AI only has access to this article — it won't make up facts. Try:

AI can be wrong. Cross-check before sharing.

Supporting evidence0 items
Community check0 comments
No votes yet
0% real0% fake