CVE Feed

    Dashboard / CVE / CVE-2026-109619

    CVE-2026-109619

    PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed. Subsequent requests may read or branch on this stale state before it is fully initialized. Multiple strategies can trigger this condition and produce remote code execution (RCE).

    Published:Oct 21, 2026
    Last Modified:Oct 23, 2026
    EPS:Oct 21, 2026
    EPSS Score:0.05991
    CVSS Score:8.1

    Affected Products

    Vendor
    Paloaltonetworks
    Product
    Pan-os
    Vendor
    Paloaltonetworks
    Product
    Panorama M-200
    Vendor
    Paloaltonetworks
    Product
    Panorama M-300
    Vendor
    Paloaltonetworks
    Product
    Panorama M-500
    Vendor
    Paloaltonetworks
    Product
    Panorama M-600
    Vendor
    Paloaltonetworks
    Product
    Panorama M-700
    Vendor
    Paloaltonetworks
    Product
    Panorama Virtual Appliance
    Vendor
    Paloaltonetworks
    Product
    Wf-500
    Vendor
    Paloaltonetworks
    Product
    Wf-500-b
    Vendor
    Php
    Product
    Php
    Vendor
    Redhat
    Product
    Enterprise Linux
    Vendor
    Redhat
    Product
    Hummingbird
    Vendor
    Siemens
    Product
    Ruggedcom Ape1808
    Vendor
    Siemens
    Product
    Ruggedcom Ape1808 Firmware

    Exploits

    https://github.com/1Nightlovel/CVE-2026-109619https://github.com/aarsaputra/php2shellhttps://github.com/abraxas/php-stale-global-uafhttps://github.com/baimaobg/php-cve-2026-109619-labhttps://github.com/basesixtythree/B63-POC-CVE-2026-109619https://github.com/bigb0x/php2shell-pochttps://github.com/cozybear-dev/cve-2026-109619https://github.com/DarynOngera/solid-palm-treehttps://github.com/EQSTLab/CVE-2026-109619https://github.com/FarhadHosen101/PHP2Shell-CVE-2026-109619https://github.com/fellipgomes/br-php2shellhttps://github.com/fmdiscioglu/php-cve-2026-109619-checkerhttps://github.com/franckferman/CVE-2026-109619https://github.com/LordX404/php2shell-exploithttps://github.com/mazdel/php2shell-pochttps://github.com/MorphingYU/CVE-2026-109619https://github.com/Prajjwal-Srivastava/php2shell_scannerhttps://github.com/RuanSerraAzul/CVE-2026-109619-POChttps://github.com/santihabib/CVE-2026-109619https://github.com/syrex1013/CVE-2026-109619https://github.com/Taz1920/cve-2026-109619https://github.com/unlimit0118/CVE-2026-109619-php2shell-pochttps://github.com/utkarsssh17/cve-2026-109619-php-uaf-pochttps://github.com/VKKKV/php2shell-exphttps://github.com/WallcroftUK/CVE-2026-109619

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-130 Excessive Allocation

    Related CVEs

    CVE-2026-109618 (CVSS 9.2) — PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the reques…
    CVE-2026-0316 (CVSS 1.1) — A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious a…
    CVE-2026-0322 (CVSS 8.6) — A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS® software…
    CVE-2026-0301 (CVSS 1.7) — An information disclosure vulnerability in the URL Filtering feature of Palo Alto Networks PAN-OS® software en…
    CVE-2026-0279 (CVSS 1.3) — Multiple cross site scripting vulnerabilities in the User-ID™ Authentication Portal (aka Captive Portal) servi…
    CVE-2026-0280 (CVSS 1.7) — An IPv6 packet processing vulnerability in the dataplane of Palo Alto Networks PAN-OS® software enables an una…
    CVE-2026-0281 (CVSS 2.1) — An information disclosure vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated atta…
    CVE-2026-0282 (CVSS 2.7) — A file deletion vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with …
    CVE-2026-0283 (CVSS 4.5) — An authentication bypass vulnerability in Large Scale VPN ( LSVPN) functionality of Palo Alto Networks PAN-OS …
    CVE-2026-0284 (CVSS 4.7) — An XML injection vulnerability in the Large Scale VPN (LSVPN) functionality of Palo Alto Networks PAN-OS® soft…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High