CVE search · CVE-2026-109618
CVE-2026-109618
critical 9.2 Known exploited
PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).
Details
- Status
- Analyzed
- Published
- Last changed
- Source
- security@php.net
Severity
| Version | Score | Vector | Source |
|---|---|---|---|
| CVSS 4.0 | critical 9.2 | CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
security@php.netSecondary |
| CVSS 3.1 | critical 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
nvd@nist.govPrimary |
Affected products
Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.
- php · php
- siemens · ruggedcom_ape1808_firmware
- paloaltonetworks · pan-os
- paloaltonetworks · panorama_virtual_appliance
- siemens · blueplanet_360_nx3_m6_wm_od_iisx_firmware
- siemens · blueplanet_360_nx3_m6_wm_od_iisx-s_firmware
- siemens · energy_engage
- siemens · spectrum_power_4
- siemens · spectrum_power_7
- siemens · spectrum_power_tg
- siemens · amis_ts
References
- https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79wMitigationVendor Advisory
- http://seclists.org/fulldisclosure/2026/Oct/51Mailing List
- http://www.openwall.com/lists/oss-security/2026/10/21/6Mailing ListThird Party Advisory
- http://www.openwall.com/lists/oss-security/2026/10/23/5Mailing ListThird Party Advisory
- https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/Third Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-166980.htmlThird Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-566435.htmlThird Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-566512.htmlThird Party Advisory
- https://php2shell.delftintellab.comThird Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618US Government Resource
- https://www.wiz.io/blog/php2shell-php-rceThird Party Advisory