Lucene search
+L

CVE-2026-109618

🗓️ 21 Oct 2026 13:48:34Reported by phpType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 479 Media mentions👁 1663 Views

Remote code execution in PHP via OOM corruption during request cleanup.

Related
Detection
Affected
Refs
Social
ReporterTitlePublishedViews
Family
githubexploit
GithubExploit
Exploit for CVE-2026-109618
21 Oct 202613:53
–githubexploit
githubexploit
GithubExploit
Exploit for CVE-2026-109618
21 Oct 202614:08
–githubexploit
githubexploit
GithubExploit
Exploit for Improperly Controlled Sequential Memory Allocation in Php
22 Oct 202613:47
–githubexploit
githubexploit
GithubExploit
php2shell-assessment-global
21 Oct 202613:31
–githubexploit
githubexploit
GithubExploit
Exploit for Improperly Controlled Sequential Memory Allocation in Php
22 Oct 202610:01
–githubexploit
githubexploit
GithubExploit
Exploit for Improperly Controlled Sequential Memory Allocation in Php
22 Oct 202609:21
–githubexploit
githubexploit
GithubExploit
Exploit for CVE-2026-109618
21 Oct 202614:36
–githubexploit
githubexploit
GithubExploit
Exploit for CVE-2026-109618
21 Oct 202613:19
–githubexploit
githubexploit
GithubExploit
php2shell-detect-exploit-kit
21 Oct 202615:13
–githubexploit
githubexploit
GithubExploit
Exploit for CVE-2026-109618
21 Oct 202611:55
–githubexploit
Rows per page
NVD
Vulners
Node
OR
phpphpRange7.3.0–8.2.35
phpphpRange8.3.0–8.3.36
phpphpRange8.4.0–8.4.27
phpphpRange8.5.0–8.5.12
Node
OR
paloaltonetworkspan-osRange10.2.0–10.2.7
paloaltonetworkspan-osMatch10.2.10h10
paloaltonetworkspan-osMatch10.2.10h11
paloaltonetworkspan-osMatch10.2.10h12
paloaltonetworkspan-osMatch10.2.10h13
paloaltonetworkspan-osMatch10.2.10h14
paloaltonetworkspan-osMatch10.2.10h17
paloaltonetworkspan-osMatch10.2.10h18
paloaltonetworkspan-osMatch10.2.10h21
paloaltonetworkspan-osMatch10.2.10h27
paloaltonetworkspan-osMatch10.2.10h30
paloaltonetworkspan-osMatch10.2.10h31
paloaltonetworkspan-osMatch10.2.10h36
paloaltonetworkspan-osMatch10.2.10h37
paloaltonetworkspan-osMatch10.2.10h39
paloaltonetworkspan-osMatch10.2.10h40
paloaltonetworkspan-osMatch10.2.10h41
paloaltonetworkspan-osMatch10.2.13h10
paloaltonetworkspan-osMatch10.2.13h15
paloaltonetworkspan-osMatch10.2.13h16
paloaltonetworkspan-osMatch10.2.13h18
paloaltonetworkspan-osMatch10.2.13h21
paloaltonetworkspan-osMatch10.2.13h22
paloaltonetworkspan-osMatch10.2.13h23
paloaltonetworkspan-osMatch10.2.13h24
paloaltonetworkspan-osMatch10.2.13h26
paloaltonetworkspan-osMatch10.2.16h10
paloaltonetworkspan-osMatch10.2.16h11
paloaltonetworkspan-osMatch10.2.18h10
paloaltonetworkspan-osMatch10.2.18h12
Node
OR
paloaltonetworkspan-osRange11.1.0–11.1.4
paloaltonetworkspan-osMatch11.1.10h10
paloaltonetworkspan-osMatch11.1.10h12
paloaltonetworkspan-osMatch11.1.10h21
paloaltonetworkspan-osMatch11.1.10h25
paloaltonetworkspan-osMatch11.1.10h26
paloaltonetworkspan-osMatch11.1.10h27
paloaltonetworkspan-osMatch11.1.10h28
paloaltonetworkspan-osMatch11.1.10h30
paloaltonetworkspan-osMatch11.1.10h32
paloaltonetworkspan-osMatch11.1.10h33
paloaltonetworkspan-osMatch11.1.10h35
paloaltonetworkspan-osMatch11.1.13h10
paloaltonetworkspan-osMatch11.1.13h11
paloaltonetworkspan-osMatch11.1.13h12
paloaltonetworkspan-osMatch11.1.13h15
Node
OR
paloaltonetworkspan-osRange11.2.0–11.2.4
paloaltonetworkspan-osMatch11.2.10h10
paloaltonetworkspan-osMatch11.2.10h12
paloaltonetworkspan-osMatch11.2.10h13
Node
OR
paloaltonetworkspan-osRange12.2.0–12.2.4
Node
OR
siemensenergy_engageMatch2.0service_pack9
siemensenergy_engageMatch3.1service_pack1
Node
[
  {
    "vendor": "PHP Group",
    "product": "PHP",
    "packageName": "php-src",
    "versions": [
      {
        "status": "affected",
        "version": "8.2.*",
        "lessThan": "8.2.35",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "8.3.*",
        "lessThan": "8.3.36",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "8.4.*",
        "lessThan": "8.4.27",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "8.5.*",
        "lessThan": "8.5.12",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

05 Nov 2026 19:17Current
9.1Critical risk
Vulners AI Score9.1
CVSS 3.19.8
CVSS 49.2
EPSS0.99999
SSVC
1663