UNKNOWN OSS-Security
CVE-2026-109619
CVE-2026-109619: PHP 8.2–8.5 RCE via stale global state
CVE-2026-109619: PHP 8.2–8.5 RCE via stale global state
Affected Products
- CVE-2026-109619
Remediation
$ sudo apt install --only-upgrade phpReferences
- https://www.openwall.com/lists/oss-security/2026/10/21/7
- https://www.openwall.com/lists/oss-security/2026/10/21/16
- https://www.openwall.com/lists/oss-security/2026/10/21/17
This unknown severity vulnerability was published on 2026-10-21 via OSS-Security. A remediation command is available below. Affected: CVE-2026-109619.
vulnfeed aggregates 13361 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.