VU#763488

vendorUScert_cc_vince

CERT/CC Vulnerability Note VU#763488

view advisory published 2026-10-22

A published security advisory; the vulnerabilities below are the ones it describes.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2026-109619UShigh8.1Exploit
PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The g…
CVE-2026-109618UScritical9.8Exploit
PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan