CVE-2026-109619: PHP Stale Internal Request-State Vulnerability

Published Oct 16, 2026
·
Updated

GHSA - https://github.com/php/php-src/security/advisories/GHSA-h37m-fxqh-w76h

Found a crash while investigating https://github.com/php/php-src/security/advisories/GHSA-626f-5vcj-8h2p.

An OOM at the wrong time can leave zendarray s in a corrupted state, and cause a zvalptrdtor() on uninitialized memory during shutdown. This seems critical as this can be triggered during input parsing.

Details

zendhashstraddorupdatei() updates ht->nNumUsed before initializing the bucket, and then allocates a zendstring for the key with zendstringinit() . If zendstringinit() OOMs, the zendarray is left with one uninitialized bucket.

idx = ht->nNumUsed++; ht->nNumOfElements++; p = ht->arData + idx; p->key = key = zendstringinit(str, len, GCFLAGS(ht) & ISARRAYPERSISTENT);

During shutdown, izvalptrdtor() is called on the uninitialized bucket, which might contain data from user inputs

Other sources

PHP contains a stale internal request-state vulnerability that allows for unauthenticated remote code execution.

— CISA

PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed. Subsequent requests may read or branch on this stale state before it is fully initialized. Multiple strategies can trigger this condition and produce remote code execution (RCE).

— Ubuntu

Affected Software

349 affected componentsFixes available
PHP PHP>=8.2<=8.5
debian/php8.2<=8.2.32-1~deb12u1
8.2.35-1~deb12u1
debian/php8.4<=8.4.24-1~deb13u1
8.4.27-1~deb13u18.4.27-1
PHP Group PHP
bitnami/libphp>=5.4.0<8.2.35
8.2.35
bitnami/libphp>=8.3.0<8.3.36
8.3.36
bitnami/libphp>=8.4.0<8.4.27
8.4.27
bitnami/libphp>=8.5.0<8.5.12
8.5.12
bitnami/php>=5.4.0<8.2.35
8.2.35
bitnami/php>=8.3.0<8.3.36
8.3.36
bitnami/php>=8.4.0<8.4.27
8.4.27
bitnami/php>=8.5.0<8.5.12
8.5.12
bitnami/php-min>=5.4.0<8.2.35
8.2.35
bitnami/php-min>=8.3.0<8.3.36
8.3.36
bitnami/php-min>=8.4.0<8.4.27
8.4.27
bitnami/php-min>=8.5.0<8.5.12
8.5.12
ubuntu/php5<5.5.9+dfsg-1ubuntu4.29+esm18
5.5.9+dfsg-1ubuntu4.29+esm18
ubuntu/php7.0<7.0.33-0ubuntu0.16.04.16+esm22
7.0.33-0ubuntu0.16.04.16+esm22
ubuntu/php7.2<7.2.24-0ubuntu0.18.04.17+esm14
7.2.24-0ubuntu0.18.04.17+esm14
ubuntu/php7.4<7.4.3-4ubuntu2.29+esm5
7.4.3-4ubuntu2.29+esm5
ubuntu/php8.1<8.1.2-1ubuntu2.28
8.1.2-1ubuntu2.28
ubuntu/php8.3<8.3.6-0ubuntu0.24.04.13
8.3.6-0ubuntu0.24.04.13
ubuntu/php8.5<8.5.9-0ubuntu2.1
8.5.9-0ubuntu2.1
ubuntu/php8.5<8.5.4-0ubuntu1.5
8.5.4-0ubuntu1.5
PHP PHP>=5.4.0<8.2.35
PHP PHP>=8.3.0<8.3.36
PHP PHP>=8.4.0<8.4.27
PHP PHP>=8.5.0<8.5.12
All of the following
Siemens Ruggedcom Ape1808 Firmware
Siemens Ruggedcom Ape1808
Palo Alto Networks PAN-OS>=10.2.0<10.2.7
Palo Alto Networks PAN-OS=10.2.7
Palo Alto Networks PAN-OS=10.2.7-h1
Palo Alto Networks PAN-OS=10.2.7-h10
Palo Alto Networks PAN-OS=10.2.7-h11
Palo Alto Networks PAN-OS=10.2.7-h12
Palo Alto Networks PAN-OS=10.2.7-h13
Palo Alto Networks PAN-OS=10.2.7-h14
Palo Alto Networks PAN-OS=10.2.7-h15
Palo Alto Networks PAN-OS=10.2.7-h16
Palo Alto Networks PAN-OS=10.2.7-h17
Palo Alto Networks PAN-OS=10.2.7-h18
Palo Alto Networks PAN-OS=10.2.7-h19
Palo Alto Networks PAN-OS=10.2.7-h2
Palo Alto Networks PAN-OS=10.2.7-h20
Palo Alto Networks PAN-OS=10.2.7-h21
Palo Alto Networks PAN-OS=10.2.7-h22
Palo Alto Networks PAN-OS=10.2.7-h23
Palo Alto Networks PAN-OS=10.2.7-h24
Palo Alto Networks PAN-OS=10.2.7-h3
Palo Alto Networks PAN-OS=10.2.7-h32
Palo Alto Networks PAN-OS=10.2.7-h34
Palo Alto Networks PAN-OS=10.2.7-h35
Palo Alto Networks PAN-OS=10.2.7-h36
Palo Alto Networks PAN-OS=10.2.7-h37
Palo Alto Networks PAN-OS=10.2.7-h38
Palo Alto Networks PAN-OS=10.2.7-h4
Palo Alto Networks PAN-OS=10.2.7-h5
Palo Alto Networks PAN-OS=10.2.7-h6
Palo Alto Networks PAN-OS=10.2.7-h7
Palo Alto Networks PAN-OS=10.2.7-h8
Palo Alto Networks PAN-OS=10.2.7-h9
Palo Alto Networks PAN-OS=10.2.8
Palo Alto Networks PAN-OS=10.2.9
Palo Alto Networks PAN-OS=10.2.10
Palo Alto Networks PAN-OS=10.2.10-h1
Palo Alto Networks PAN-OS=10.2.10-h10
Palo Alto Networks PAN-OS=10.2.10-h11
Palo Alto Networks PAN-OS=10.2.10-h12
Palo Alto Networks PAN-OS=10.2.10-h13
Palo Alto Networks PAN-OS=10.2.10-h14
Palo Alto Networks PAN-OS=10.2.10-h17
Palo Alto Networks PAN-OS=10.2.10-h18
Palo Alto Networks PAN-OS=10.2.10-h2
Palo Alto Networks PAN-OS=10.2.10-h21
Palo Alto Networks PAN-OS=10.2.10-h27
Palo Alto Networks PAN-OS=10.2.10-h3
Palo Alto Networks PAN-OS=10.2.10-h30
Palo Alto Networks PAN-OS=10.2.10-h31
Palo Alto Networks PAN-OS=10.2.10-h36
Palo Alto Networks PAN-OS=10.2.10-h37
Palo Alto Networks PAN-OS=10.2.10-h39
Palo Alto Networks PAN-OS=10.2.10-h4
Palo Alto Networks PAN-OS=10.2.10-h40
Palo Alto Networks PAN-OS=10.2.10-h41
Palo Alto Networks PAN-OS=10.2.10-h5
Palo Alto Networks PAN-OS=10.2.10-h6
Palo Alto Networks PAN-OS=10.2.10-h7
Palo Alto Networks PAN-OS=10.2.10-h8
Palo Alto Networks PAN-OS=10.2.10-h9
Palo Alto Networks PAN-OS=10.2.11
Palo Alto Networks PAN-OS=10.2.12
Palo Alto Networks PAN-OS=10.2.13
Palo Alto Networks PAN-OS=10.2.13-h1
Palo Alto Networks PAN-OS=10.2.13-h10
Palo Alto Networks PAN-OS=10.2.13-h15
Palo Alto Networks PAN-OS=10.2.13-h16
Palo Alto Networks PAN-OS=10.2.13-h18
Palo Alto Networks PAN-OS=10.2.13-h2
Palo Alto Networks PAN-OS=10.2.13-h21
Palo Alto Networks PAN-OS=10.2.13-h22
Palo Alto Networks PAN-OS=10.2.13-h23
Palo Alto Networks PAN-OS=10.2.13-h24
Palo Alto Networks PAN-OS=10.2.13-h26
Palo Alto Networks PAN-OS=10.2.13-h3
Palo Alto Networks PAN-OS=10.2.13-h4
Palo Alto Networks PAN-OS=10.2.13-h5
Palo Alto Networks PAN-OS=10.2.13-h7
Palo Alto Networks PAN-OS=10.2.14
Palo Alto Networks PAN-OS=10.2.15
Palo Alto Networks PAN-OS=10.2.16
Palo Alto Networks PAN-OS=10.2.16-h1
Palo Alto Networks PAN-OS=10.2.16-h10
Palo Alto Networks PAN-OS=10.2.16-h11
Palo Alto Networks PAN-OS=10.2.16-h4
Palo Alto Networks PAN-OS=10.2.16-h6
Palo Alto Networks PAN-OS=10.2.16-h7
Palo Alto Networks PAN-OS=10.2.16-h8
Palo Alto Networks PAN-OS=10.2.16-h9
Palo Alto Networks PAN-OS=10.2.17
Palo Alto Networks PAN-OS=10.2.18
Palo Alto Networks PAN-OS=10.2.18-h1
Palo Alto Networks PAN-OS=10.2.18-h10
Palo Alto Networks PAN-OS=10.2.18-h12
Palo Alto Networks PAN-OS=10.2.18-h5
Palo Alto Networks PAN-OS=10.2.18-h6
Palo Alto Networks PAN-OS=10.2.18-h7
Palo Alto Networks PAN-OS=10.2.18-h8
Palo Alto Networks PAN-OS=10.2.18-h9
Palo Alto Networks PAN-OS>=11.1.0<11.1.4
Palo Alto Networks PAN-OS=11.1.4
Palo Alto Networks PAN-OS=11.1.4-h1
Palo Alto Networks PAN-OS=11.1.4-h10
Palo Alto Networks PAN-OS=11.1.4-h11
Palo Alto Networks PAN-OS=11.1.4-h12
Palo Alto Networks PAN-OS=11.1.4-h13
Palo Alto Networks PAN-OS=11.1.4-h15
Palo Alto Networks PAN-OS=11.1.4-h16
Palo Alto Networks PAN-OS=11.1.4-h17
Palo Alto Networks PAN-OS=11.1.4-h18
Palo Alto Networks PAN-OS=11.1.4-h2
Palo Alto Networks PAN-OS=11.1.4-h25
Palo Alto Networks PAN-OS=11.1.4-h27
Palo Alto Networks PAN-OS=11.1.4-h3
Palo Alto Networks PAN-OS=11.1.4-h32
Palo Alto Networks PAN-OS=11.1.4-h33
Palo Alto Networks PAN-OS=11.1.4-h34
Palo Alto Networks PAN-OS=11.1.4-h35
Palo Alto Networks PAN-OS=11.1.4-h36
Palo Alto Networks PAN-OS=11.1.4-h37
Palo Alto Networks PAN-OS=11.1.4-h4
Palo Alto Networks PAN-OS=11.1.4-h5
Palo Alto Networks PAN-OS=11.1.4-h6
Palo Alto Networks PAN-OS=11.1.4-h7
Palo Alto Networks PAN-OS=11.1.4-h8
Palo Alto Networks PAN-OS=11.1.4-h9
Palo Alto Networks PAN-OS=11.1.5
Palo Alto Networks PAN-OS=11.1.6
Palo Alto Networks PAN-OS=11.1.6-h1
Palo Alto Networks PAN-OS=11.1.6-h10
Palo Alto Networks PAN-OS=11.1.6-h14
Palo Alto Networks PAN-OS=11.1.6-h17
Palo Alto Networks PAN-OS=11.1.6-h18
Palo Alto Networks PAN-OS=11.1.6-h19
Palo Alto Networks PAN-OS=11.1.6-h2
Palo Alto Networks PAN-OS=11.1.6-h20
Palo Alto Networks PAN-OS=11.1.6-h21
Palo Alto Networks PAN-OS=11.1.6-h22
Palo Alto Networks PAN-OS=11.1.6-h23
Palo Alto Networks PAN-OS=11.1.6-h25
Palo Alto Networks PAN-OS=11.1.6-h29
Palo Alto Networks PAN-OS=11.1.6-h3
Palo Alto Networks PAN-OS=11.1.6-h32
Palo Alto Networks PAN-OS=11.1.6-h33
Palo Alto Networks PAN-OS=11.1.6-h34
Palo Alto Networks PAN-OS=11.1.6-h35
Palo Alto Networks PAN-OS=11.1.6-h36
Palo Alto Networks PAN-OS=11.1.6-h38
Palo Alto Networks PAN-OS=11.1.6-h39
Palo Alto Networks PAN-OS=11.1.6-h4
Palo Alto Networks PAN-OS=11.1.6-h5
Palo Alto Networks PAN-OS=11.1.6-h6
Palo Alto Networks PAN-OS=11.1.6-h7
Palo Alto Networks PAN-OS=11.1.7
Palo Alto Networks PAN-OS=11.1.7-h1
Palo Alto Networks PAN-OS=11.1.7-h10
Palo Alto Networks PAN-OS=11.1.7-h11
Palo Alto Networks PAN-OS=11.1.7-h2
Palo Alto Networks PAN-OS=11.1.7-h4
Palo Alto Networks PAN-OS=11.1.7-h6
Palo Alto Networks PAN-OS=11.1.7-h8
Palo Alto Networks PAN-OS=11.1.8
Palo Alto Networks PAN-OS=11.1.9
Palo Alto Networks PAN-OS=11.1.10
Palo Alto Networks PAN-OS=11.1.10-h1
Palo Alto Networks PAN-OS=11.1.10-h10
Palo Alto Networks PAN-OS=11.1.10-h12
Palo Alto Networks PAN-OS=11.1.10-h21
Palo Alto Networks PAN-OS=11.1.10-h25
Palo Alto Networks PAN-OS=11.1.10-h26
Palo Alto Networks PAN-OS=11.1.10-h27
Palo Alto Networks PAN-OS=11.1.10-h28
Palo Alto Networks PAN-OS=11.1.10-h30
Palo Alto Networks PAN-OS=11.1.10-h32
Palo Alto Networks PAN-OS=11.1.10-h33
Palo Alto Networks PAN-OS=11.1.10-h35
Palo Alto Networks PAN-OS=11.1.10-h4
Palo Alto Networks PAN-OS=11.1.10-h5
Palo Alto Networks PAN-OS=11.1.10-h7
Palo Alto Networks PAN-OS=11.1.10-h9
Palo Alto Networks PAN-OS=11.1.11
Palo Alto Networks PAN-OS=11.1.12
Palo Alto Networks PAN-OS=11.1.13
Palo Alto Networks PAN-OS=11.1.13-h1
Palo Alto Networks PAN-OS=11.1.13-h10
Palo Alto Networks PAN-OS=11.1.13-h11
Palo Alto Networks PAN-OS=11.1.13-h12
Palo Alto Networks PAN-OS=11.1.13-h15
Palo Alto Networks PAN-OS=11.1.13-h2
Palo Alto Networks PAN-OS=11.1.13-h3
Palo Alto Networks PAN-OS=11.1.13-h5
Palo Alto Networks PAN-OS=11.1.13-h6
Palo Alto Networks PAN-OS=11.1.13-h7
Palo Alto Networks PAN-OS=11.1.13-h8
Palo Alto Networks PAN-OS=11.1.13-h9
Palo Alto Networks PAN-OS=11.1.14
Palo Alto Networks PAN-OS=11.1.15
Palo Alto Networks PAN-OS=11.1.16
Palo Alto Networks PAN-OS=11.1.16-h1
Palo Alto Networks PAN-OS=11.1.16-h2
Palo Alto Networks PAN-OS=11.1.16-h3
Palo Alto Networks PAN-OS>=11.2.0<11.2.4
Palo Alto Networks PAN-OS=11.2.4
Palo Alto Networks PAN-OS=11.2.4-h1
Palo Alto Networks PAN-OS=11.2.4-h10
Palo Alto Networks PAN-OS=11.2.4-h11
Palo Alto Networks PAN-OS=11.2.4-h12
Palo Alto Networks PAN-OS=11.2.4-h14
Palo Alto Networks PAN-OS=11.2.4-h15
Palo Alto Networks PAN-OS=11.2.4-h17
Palo Alto Networks PAN-OS=11.2.4-h18
Palo Alto Networks PAN-OS=11.2.4-h2
Palo Alto Networks PAN-OS=11.2.4-h20
Palo Alto Networks PAN-OS=11.2.4-h3
Palo Alto Networks PAN-OS=11.2.4-h4
Palo Alto Networks PAN-OS=11.2.4-h5
Palo Alto Networks PAN-OS=11.2.4-h6
Palo Alto Networks PAN-OS=11.2.4-h7
Palo Alto Networks PAN-OS=11.2.4-h8
Palo Alto Networks PAN-OS=11.2.4-h9
Palo Alto Networks PAN-OS=11.2.5
Palo Alto Networks PAN-OS=11.2.6
Palo Alto Networks PAN-OS=11.2.7
Palo Alto Networks PAN-OS=11.2.7-h1
Palo Alto Networks PAN-OS=11.2.7-h10
Palo Alto Networks PAN-OS=11.2.7-h11
Palo Alto Networks PAN-OS=11.2.7-h12
Palo Alto Networks PAN-OS=11.2.7-h13
Palo Alto Networks PAN-OS=11.2.7-h14
Palo Alto Networks PAN-OS=11.2.7-h15
Palo Alto Networks PAN-OS=11.2.7-h16
Palo Alto Networks PAN-OS=11.2.7-h17
Palo Alto Networks PAN-OS=11.2.7-h18
Palo Alto Networks PAN-OS=11.2.7-h19
Palo Alto Networks PAN-OS=11.2.7-h2
Palo Alto Networks PAN-OS=11.2.7-h3
Palo Alto Networks PAN-OS=11.2.7-h4
Palo Alto Networks PAN-OS=11.2.7-h7
Palo Alto Networks PAN-OS=11.2.7-h8
Palo Alto Networks PAN-OS=11.2.8
Palo Alto Networks PAN-OS=11.2.9
Palo Alto Networks PAN-OS=11.2.10
Palo Alto Networks PAN-OS=11.2.10-h1
Palo Alto Networks PAN-OS=11.2.10-h10
Palo Alto Networks PAN-OS=11.2.10-h12
Palo Alto Networks PAN-OS=11.2.10-h13
Palo Alto Networks PAN-OS=11.2.10-h2
Palo Alto Networks PAN-OS=11.2.10-h3
Palo Alto Networks PAN-OS=11.2.10-h4
Palo Alto Networks PAN-OS=11.2.10-h5
Palo Alto Networks PAN-OS=11.2.10-h6
Palo Alto Networks PAN-OS=11.2.10-h7
Palo Alto Networks PAN-OS=11.2.10-h8
Palo Alto Networks PAN-OS=11.2.10-h9
Palo Alto Networks PAN-OS=11.2.11
Palo Alto Networks PAN-OS=11.2.12
Palo Alto Networks PAN-OS=11.2.13
Palo Alto Networks PAN-OS=11.2.13-h1
Palo Alto Networks PAN-OS=11.2.13-h2
Palo Alto Networks PAN-OS=11.2.13-h3
Palo Alto Networks PAN-OS=11.2.15
Palo Alto Networks PAN-OS=11.2.16
Palo Alto Networks PAN-OS>=12.1.0<12.1.4
Palo Alto Networks PAN-OS=12.1.4
Palo Alto Networks PAN-OS=12.1.4-h10
Palo Alto Networks PAN-OS=12.1.4-h11
Palo Alto Networks PAN-OS=12.1.4-h12
Palo Alto Networks PAN-OS=12.1.4-h2
Palo Alto Networks PAN-OS=12.1.4-h3
Palo Alto Networks PAN-OS=12.1.4-h5
Palo Alto Networks PAN-OS=12.1.4-h6
Palo Alto Networks PAN-OS=12.1.4-h7
Palo Alto Networks PAN-OS=12.1.4-h8
Palo Alto Networks PAN-OS=12.1.4-h9
Palo Alto Networks PAN-OS=12.1.5
Palo Alto Networks PAN-OS=12.1.6
Palo Alto Networks PAN-OS=12.1.7
Palo Alto Networks PAN-OS=12.1.7-h1
Palo Alto Networks PAN-OS=12.1.7-h2
Palo Alto Networks PAN-OS=12.1.7-h3
Palo Alto Networks PAN-OS=12.1.7-h5
Palo Alto Networks PAN-OS=12.1.7-h6
Palo Alto Networks PAN-OS=12.1.7-h8
Palo Alto Networks PAN-OS=12.1.7-h9
Palo Alto Networks PAN-OS=12.1.8
Palo Alto Networks PAN-OS=12.1.9
Palo Alto Networks PAN-OS=12.1.10
Palo Alto Networks PAN-OS=12.1.10-h2
Palo Alto Networks PAN-OS>=12.2.0<12.2.4
Palo Alto Networks PAN-OS=12.2.4
All of the following
Palo Alto Networks PAN-OS
Any of the following
Palo Alto Networks Panorama M-200
Palo Alto Networks Panorama M-500
Palo Alto Networks Panorama M-600
Palo Alto Networks PAN-OS
Siemens Amis Ts
All of the following
Siemens Blueplanet 360 Nx3 M6 Wm Od Iisx-s Firmware
Siemens Blueplanet 360 Nx3 M6 Wm Od Iisx-s
Siemens Energy Engage=2.0-service_pack9
Siemens Energy Engage=3.1-service_pack1
Siemens Spectrum Power 3
Siemens Spectrum Power 4
Siemens Spectrum Power 7
Siemens Spectrum Power Tg
All of the following
Siemens Blueplanet 360 Nx3 M6 Wm Od Iisx Firmware
Siemens Blueplanet 360 Nx3 M6 Wm Od Iisx
debian/php8.2<8.2.35-1~deb12u1
8.2.35-1~deb12u1
debian/php8.4<8.4.27-1~deb13u1
8.4.27-1~deb13u1
debian/php8.4<8.4.27-1
8.4.27-1
alpine/php82<8.2.35-r0
8.2.35-r0
alpine/php82<8.2.35-r0
8.2.35-r0
alpine/php83<8.3.36-r0
8.3.36-r0
alpine/php83<8.3.36-r0
8.3.36-r0
alpine/php83<8.3.36-r0
8.3.36-r0
alpine/php84<8.4.27-r0
8.4.27-r0
alpine/php84<8.4.27-r0
8.4.27-r0
alpine/php84<8.4.27-r0
8.4.27-r0
alpine/php85<8.5.12-r0
8.5.12-r0
alpine/php85<8.5.12-r0
8.5.12-r0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade debian/php8.2 to a version that resolves this vulnerability.

    Fixed in 8.2.35-1~deb12u1
  2. Upgrade

    Upgrade debian/php8.4 to a version that resolves this vulnerability.

    Fixed in 8.4.27-1~deb13u1Fixed in 8.4.27-1
  3. Upgrade

    Upgrade bitnami/libphp to a version that resolves this vulnerability.

    Fixed in 8.2.35
  4. Upgrade

    Upgrade bitnami/libphp to a version that resolves this vulnerability.

    Fixed in 8.3.36
  5. Upgrade

    Upgrade bitnami/libphp to a version that resolves this vulnerability.

    Fixed in 8.4.27
  6. Upgrade

    Upgrade bitnami/libphp to a version that resolves this vulnerability.

    Fixed in 8.5.12
  7. Upgrade

    Upgrade bitnami/php to a version that resolves this vulnerability.

    Fixed in 8.2.35
  8. Upgrade

    Upgrade bitnami/php to a version that resolves this vulnerability.

    Fixed in 8.3.36
  9. Upgrade

    Upgrade bitnami/php to a version that resolves this vulnerability.

    Fixed in 8.4.27
  10. Upgrade

    Upgrade bitnami/php to a version that resolves this vulnerability.

    Fixed in 8.5.12
  11. Upgrade

    Upgrade bitnami/php-min to a version that resolves this vulnerability.

    Fixed in 8.2.35
  12. Upgrade

    Upgrade bitnami/php-min to a version that resolves this vulnerability.

    Fixed in 8.3.36
  13. Upgrade

    Upgrade bitnami/php-min to a version that resolves this vulnerability.

    Fixed in 8.4.27
  14. Upgrade

    Upgrade bitnami/php-min to a version that resolves this vulnerability.

    Fixed in 8.5.12
  15. Upgrade

    Upgrade ubuntu/php5 to a version that resolves this vulnerability.

    Fixed in 5.5.9+dfsg-1ubuntu4.29+esm18
  16. Upgrade

    Upgrade ubuntu/php7.0 to a version that resolves this vulnerability.

    Fixed in 7.0.33-0ubuntu0.16.04.16+esm22
  17. Upgrade

    Upgrade ubuntu/php7.2 to a version that resolves this vulnerability.

    Fixed in 7.2.24-0ubuntu0.18.04.17+esm14
  18. Upgrade

    Upgrade ubuntu/php7.4 to a version that resolves this vulnerability.

    Fixed in 7.4.3-4ubuntu2.29+esm5
  19. Upgrade

    Upgrade ubuntu/php8.1 to a version that resolves this vulnerability.

    Fixed in 8.1.2-1ubuntu2.28
  20. Upgrade

    Upgrade ubuntu/php8.3 to a version that resolves this vulnerability.

    Fixed in 8.3.6-0ubuntu0.24.04.13
  21. Upgrade

    Upgrade ubuntu/php8.5 to a version that resolves this vulnerability.

    Fixed in 8.5.9-0ubuntu2.1
  22. Upgrade

    Upgrade ubuntu/php8.5 to a version that resolves this vulnerability.

    Fixed in 8.5.4-0ubuntu1.5
  23. Upgrade

    Upgrade debian/php8.4 to a version that resolves this vulnerability.

    Fixed in 8.4.27-1~deb13u1
  24. Upgrade

    Upgrade debian/php8.4 to a version that resolves this vulnerability.

    Fixed in 8.4.27-1
  25. Upgrade

    Upgrade alpine/php82 to a version that resolves this vulnerability.

    Fixed in 8.2.35-r0
  26. Upgrade

    Upgrade alpine/php83 to a version that resolves this vulnerability.

    Fixed in 8.3.36-r0
  27. Upgrade

    Upgrade alpine/php84 to a version that resolves this vulnerability.

    Fixed in 8.4.27-r0
  28. Upgrade

    Upgrade alpine/php85 to a version that resolves this vulnerability.

    Fixed in 8.5.12-r0
  29. Upgrade

    Upgrade PHP (EL7) to a version that resolves this vulnerability.

    Fixed in 5.4.16
  30. Upgrade

    Upgrade PHP (EL6) to a version that resolves this vulnerability.

    Fixed in 5.3.3
  31. Upgrade

    Upgrade PHP (EOL 7.3) to a version that resolves this vulnerability.

    Patch CVE-2026-109618 / CVE-2026-109619
  32. Compensating control

    For cloud services, follow applicable CISA BOD 26-04 guidance or discontinue use of the product if mitigations are unavailable.

Event History

Oct 16, 2026
Data Sourced
via Red Hat·03:59 PM
DescriptionSeverityAffected Software
Oct 21, 2026
CVE Published
via Ubuntu·12:00 AM
Data Sourced
via Ubuntu·12:00 AM
RemedyDescriptionSeverityAffected Software
Exploit Published
via GitHub·01:20 PM
CVE Published
via MITRE·01:54 PM
Data Sourced
via MITRE·01:54 PM
DescriptionWeakness
Data Sourced
via OSV·01:54 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:17 PM
DescriptionSeverityWeaknessAffected Software
Oct 22, 2026
Advisory Published
via OSV·08:04 AM
News Published
via The Register·08:37 PM
Oct 23, 2026
News Published
via ZDNet·03:09 PM
News Published
via The Register·08:04 PM
Oct 26, 2026
Data Sourced
via CISA·12:00 AM
RemedyDescriptionWeaknessAffected Software
News Published
via The Register·08:00 AM
Oct 27, 2026
News Published
via The Register·02:45 PM
Oct 28, 2026
Data Sourced
via OSV·08:16 PM
Affected Software
Oct 29, 2026
News Published
via The Register·07:05 PM

Parent advisories

This vulnerability appears in the following advisories.

Peer vulnerabilities

Found alongside the following vulnerabilities.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203