CVE-2026-109619
CRITICAL CISACVSS Score
N/A
Severity
CRITICAL
Source
CISA
Published
Oct 26, 2026
Description
PHP Group — PHP: PHP contains a stale internal request-state vulnerability that allows for unauthenticated remote code execution.