php/php CVE-2026-109619: critical 9.2

RCE via stale global state

Action: Upgrade php to 8.2.35 (8.2), 8.3.36 (8.3), 8.4.27 (8.4) or 8.5.12 (8.5) or later. Unsupported lines (8.1 and older) get no fix.

Affected

Fixed versions

Sources

• php-runtime: CVE-2026-109619
• https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp

CVE-2026-109619 · published 2026-10-21T13:34:13Z · modified 2026-10-21T13:34:13Z · JSON