{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-109618", "assignerOrgId": "dd77f84a-d19a-4638-8c3d-a322d820ed2b", "state": "PUBLISHED", "assignerShortName": "php", "dateReserved": "2026-10-12T21:03:58.117Z", "datePublished": "2026-10-21T13:48:34.845Z", "dateUpdated": "2026-10-21T16:07:52.535Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "dd77f84a-d19a-4638-8c3d-a322d820ed2b", "shortName": "php", "dateUpdated": "2026-10-21T13:48:34.845Z"}, "title": "RCE via OOM corruption", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-416", "description": "CWE-416 Use after free", "type": "CWE"}]}, {"descriptions": [{"lang": "en", "cweId": "CWE-755", "description": "CWE-755 Improper Handling of Exceptional Conditions", "type": "CWE"}]}, {"descriptions": [{"lang": "en", "cweId": "CWE-824", "description": "CWE-824 Access of uninitialized pointer", "type": "CWE"}]}, {"descriptions": [{"lang": "en", "cweId": "CWE-1325", "description": "CWE-1325 Improperly controlled sequential memory allocation", "type": "CWE"}]}, {"descriptions": [{"lang": "en", "cweId": "CWE-1419", "description": "CWE-1419 Incorrect Initialization of Resource", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-234", "descriptions": [{"lang": "en", "value": "CAPEC-234 Hijacking a privileged process"}]}], "affected": [{"vendor": "PHP Group", "product": "PHP", "packageName": "php-src", "versions": [{"status": "affected", "version": "8.2.*", "lessThan": "8.2.35", "versionType": "semver"}, {"status": "affected", "version": "8.3.*", "lessThan": "8.3.36", "versionType": "semver"}, {"status": "affected", "version": "8.4.*", "lessThan": "8.4.27", "versionType": "semver"}, {"status": "affected", "version": "8.5.*", "lessThan": "8.5.12", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).", "supportingMedia": [{"type": "text/html", "base64": false, "value": "PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).<br>"}]}], "references": [{"url": "https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w", "tags": ["vendor-advisory"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"attackVector": "NETWORK", "attackComplexity": "HIGH", "attackRequirements": "PRESENT", "privilegesRequired": "NONE", "userInteraction": "NONE", "vulnConfidentialityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subIntegrityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subAvailabilityImpact": "NONE", "exploitMaturity": "NOT_DEFINED", "Safety": "NOT_DEFINED", "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "version": "4.0", "baseSeverity": "CRITICAL", "baseScore": 9.2, "vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"}}], "workarounds": [{"lang": "en", "value": "Check the GitHub Security Advisory for mitigation strategies.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Check the GitHub Security Advisory for mitigation strategies."}]}], "credits": [{"lang": "en", "value": "Ryan at Calif.io", "type": "reporter"}, {"lang": "en", "value": "Wiz", "type": "reporter"}, {"lang": "en", "value": "OpenAI", "type": "finder"}, {"lang": "en", "value": "Arnaud Le Blanc", "type": "remediation developer"}, {"lang": "en", "value": "Ilija Tovilo", "type": "remediation developer"}, {"lang": "en", "value": "Jakub Zelenka", "type": "remediation developer"}, {"lang": "en", "value": "Nora Dossche", "type": "remediation developer"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.5"}}, "adp": [{"references": [{"url": "https://www.wiz.io/blog/php2shell-php-rce", "tags": ["third-party-advisory"]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-10-21T14:34:39.479770Z", "id": "CVE-2026-109618", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-21T14:36:24.229Z"}}, {"title": "CVE Program Container", "references": [{"url": "http://www.openwall.com/lists/oss-security/2026/10/21/6"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2026-10-21T16:07:52.535Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "http://www.openwall.com/lists/oss-security/2026/10/21/6"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2026-10-21T16:07:52.535Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-109618", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-10-21T14:34:39.479770Z"}}}], "references": [{"url": "https://www.wiz.io/blog/php2shell-php-rce", "tags": ["third-party-advisory"]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-21T14:36:08.475Z"}}], "cna": {"title": "RCE via OOM corruption", "source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "reporter", "value": "Ryan at Calif.io"}, {"lang": "en", "type": "reporter", "value": "Wiz"}, {"lang": "en", "type": "finder", "value": "OpenAI"}, {"lang": "en", "type": "remediation developer", "value": "Arnaud Le Blanc"}, {"lang": "en", "type": "remediation developer", "value": "Ilija Tovilo"}, {"lang": "en", "type": "remediation developer", "value": "Jakub Zelenka"}, {"lang": "en", "type": "remediation developer", "value": "Nora Dossche"}], "impacts": [{"capecId": "CAPEC-234", "descriptions": [{"lang": "en", "value": "CAPEC-234 Hijacking a privileged process"}]}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 9.2, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "HIGH", "attackRequirements": "PRESENT", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "PHP Group", "product": "PHP", "versions": [{"status": "affected", "version": "8.2.*", "lessThan": "8.2.35", "versionType": "semver"}, {"status": "affected", "version": "8.3.*", "lessThan": "8.3.36", "versionType": "semver"}, {"status": "affected", "version": "8.4.*", "lessThan": "8.4.27", "versionType": "semver"}, {"status": "affected", "version": "8.5.*", "lessThan": "8.5.12", "versionType": "semver"}], "packageName": "php-src", "defaultStatus": "unaffected"}], "references": [{"url": "https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w", "tags": ["vendor-advisory"]}], "workarounds": [{"lang": "en", "value": "Check the GitHub Security Advisory for mitigation strategies.", "supportingMedia": [{"type": "text/html", "value": "Check the GitHub Security Advisory for mitigation strategies.", "base64": false}]}], "x_generator": {"engine": "Vulnogram 1.0.5"}, "descriptions": [{"lang": "en", "value": "PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).", "supportingMedia": [{"type": "text/html", "value": "PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).<br>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-416", "description": "CWE-416 Use after free"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-755", "description": "CWE-755 Improper Handling of Exceptional Conditions"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-824", "description": "CWE-824 Access of uninitialized pointer"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-1325", "description": "CWE-1325 Improperly controlled sequential memory allocation"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-1419", "description": "CWE-1419 Incorrect Initialization of Resource"}]}], "providerMetadata": {"orgId": "dd77f84a-d19a-4638-8c3d-a322d820ed2b", "shortName": "php", "dateUpdated": "2026-10-21T13:48:34.845Z"}}}, "cveMetadata": {"cveId": "CVE-2026-109618", "state": "PUBLISHED", "dateUpdated": "2026-10-21T16:07:52.535Z", "dateReserved": "2026-10-12T21:03:58.117Z", "assignerOrgId": "dd77f84a-d19a-4638-8c3d-a322d820ed2b", "datePublished": "2026-10-21T13:48:34.845Z", "assignerShortName": "php"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "packageName": "php-src", "product": "PHP", "vendor": "PHP Group", "versions": [{"lessThan": "8.2.35", "status": "affected", "version": "8.2.*", "versionType": "semver"}, {"lessThan": "8.3.36", "status": "affected", "version": "8.3.*", "versionType": "semver"}, {"lessThan": "8.4.27", "status": "affected", "version": "8.4.*", "versionType": "semver"}, {"lessThan": "8.5.12", "status": "affected", "version": "8.5.*", "versionType": "semver"}]}], "source": "security@php.net"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*", "matchCriteriaId": "80F659BB-0C5C-4F1B-8323-AE52F32C3BE4", "versionEndExcluding": "8.2.35", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*", "matchCriteriaId": "40BD58D9-94BD-41B6-9DDA-30CA729409FB", "versionEndExcluding": "8.3.36", "versionStartIncluding": "8.3.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*", "matchCriteriaId": "D057202A-94FF-4118-A41F-BA8ABB76346E", "versionEndExcluding": "8.4.27", "versionStartIncluding": "8.4.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*", "matchCriteriaId": "CAF7FA75-7F87-405F-A222-C5C17D42C31F", "versionEndExcluding": "8.5.12", "versionStartIncluding": "8.5.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE)."}, {"lang": "es", "value": "PHP utiliza la funci\u00f3n `longjmp()` para los errores de falta de memoria (OOM), con el fin de salir del contexto actual y abortar la gesti\u00f3n de la solicitud. Es posible que algunos contextos no tengan debidamente en cuenta esta situaci\u00f3n y dejen la memoria de la solicitud en un estado no inicializado antes de realizar una asignaci\u00f3n. El procedimiento posterior de limpieza de la solicitud podr\u00eda leer o realizar una ramificaci\u00f3n en esta memoria. Existen m\u00faltiples estrategias de gesti\u00f3n de OOM que pueden desencadenar esta condici\u00f3n de forma sistem\u00e1tica y dar lugar a la ejecuci\u00f3n remota de c\u00f3digo (RCE)."}], "id": "CVE-2026-109618", "lastModified": "2026-10-22T10:09:59.800", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "HIGH", "attackRequirements": "PRESENT", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 9.2, "baseSeverity": "CRITICAL", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "security@php.net", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-109618", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-10-21T14:34:39.479770Z", "version": "2.0.3"}}]}, "published": "2026-10-21T14:17:09.357", "references": [{"source": "security@php.net", "tags": ["Mitigation", "Vendor Advisory"], "url": "https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.openwall.com/lists/oss-security/2026/10/21/6"}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "tags": ["Third Party Advisory"], "url": "https://www.wiz.io/blog/php2shell-php-rce"}], "sourceIdentifier": "security@php.net", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-416"}, {"lang": "en", "value": "CWE-755"}, {"lang": "en", "value": "CWE-824"}, {"lang": "en", "value": "CWE-1325"}], "source": "security@php.net", "type": "Secondary"}]}

{"affected_release": [{"advisory": "RHSA-2026:87070", "cpe": "cpe:/o:redhat:enterprise_linux:10.2", "package": "php-0:8.3.36-1.el10_2", "product_name": "Red Hat Enterprise Linux 10", "release_date": "2026-10-21T00:00:00Z"}, {"advisory": "RHSA-2026:87071", "cpe": "cpe:/o:redhat:enterprise_linux:10.2", "package": "php8.4-0:8.4.27-1.el10_2", "product_name": "Red Hat Enterprise Linux 10", "release_date": "2026-10-21T00:00:00Z"}, {"advisory": "RHSA-2026:87073", "cpe": "cpe:/a:redhat:enterprise_linux:8", "package": "php:8.2-8100020261020140951.f7998665", "product_name": "Red Hat Enterprise Linux 8", "release_date": "2026-10-21T00:00:00Z"}, {"advisory": "RHSA-2026:87080", "cpe": "cpe:/a:redhat:enterprise_linux:8", "package": "php:7.4-8100020261021081045.f7998665", "product_name": "Red Hat Enterprise Linux 8", "release_date": "2026-10-21T00:00:00Z"}, {"advisory": "RHSA-2026:87072", "cpe": "cpe:/a:redhat:enterprise_linux:9", "package": "php:8.2-9080020261020145734.9", "product_name": "Red Hat Enterprise Linux 9", "release_date": "2026-10-21T00:00:00Z"}, {"advisory": "RHSA-2026:87079", "cpe": "cpe:/a:redhat:enterprise_linux:9", "package": "php:8.3-9080020261020115403.9", "product_name": "Red Hat Enterprise Linux 9", "release_date": "2026-10-21T00:00:00Z"}, {"advisory": "RHSA-2026:87151", "cpe": "cpe:/a:redhat:enterprise_linux:9", "package": "php-0:8.0.30-8.el9_8.1", "product_name": "Red Hat Enterprise Linux 9", "release_date": "2026-10-21T00:00:00Z"}, {"advisory": "RHSA-2026:87414", "cpe": "cpe:/a:redhat:hummingbird:1", "package": "php-main-8.5.12-1.hum1", "product_name": "Red Hat Hardened Images", "release_date": "2026-10-21T00:00:00Z"}], "bugzilla": {"description": "php: OOM bailout during request parsing leads to memory corruption and RCE", "id": "2553995", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2553995"}, "csaw": true, "cvss3": {"cvss3_base_score": "8.1", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "status": "verified"}, "cwe": "CWE-416", "details": ["A flaw was found in PHP's memory limit handling during request parsing. PHP records certain state as ready for use before all required memory allocations complete. If an allocation fails due to memory exhaustion, the incomplete state is not rolled back. Subsequent cleanup operations treat the uninitialized memory as valid, leading to memory corruption. An unauthenticated attacker can exploit this via crafted HTTP requests to achieve remote code execution against mod_php with default configuration, and against FPM through application-stage paths."], "mitigation": {"lang": "en:us", "value": "See the security bulletin for a detailed mitigation procedure."}, "name": "CVE-2026-109618", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Under investigation", "package_name": "php", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Under investigation", "package_name": "php", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Affected", "package_name": "php:8.4/php", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:openshift_ai", "fix_state": "Not affected", "package_name": "rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9", "product_name": "Red Hat OpenShift AI (RHOAI)"}, {"cpe": "cpe:/a:redhat:openshift_devspaces:3", "fix_state": "Not affected", "package_name": "devspaces/code-rhel9", "product_name": "Red Hat OpenShift Dev Spaces"}, {"cpe": "cpe:/a:redhat:openshift_devspaces:3", "fix_state": "Affected", "package_name": "devspaces/udi-rhel9", "product_name": "Red Hat OpenShift Dev Spaces"}], "public_date": "2026-10-21T14:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-109618\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-109618\nhttps://access.redhat.com/security/vulnerabilities/RHSB-2026-013\nhttps://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w"], "statement": "Rated Important. An unauthenticated remote attacker could corrupt engine memory and potentially execute arbitrary code, but reliable exploitation requires precise heap manipulation and timing. Standard Red Hat Enterprise Linux deployments use PHP-FPM rather than mod_php. PHP-FPM workers exit on early initialization failures before reaching the corrupted structures, so remote code execution is difficult in practice and typically requires non-default behavior such as parsing a second request body during script execution.", "threat_severity": "Important"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[8.2.0,8.2.35)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[8.3.0,8.3.36)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[8.4.0,8.4.27)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[8.5.0,8.5.12)"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "PHP", "source": "cna", "vendor": "PHP Group"}, "product": "php", "vendor": "php"}], "created": "2026-10-21T19:45:03.550470+00:00", "updated": "2026-10-22T15:15:07.607801+00:00", "vendors": ["php", "php$PRODUCT$php"], "weaknesses": ["CWE-1325", "CWE-1419", "CWE-416", "CWE-755", "CWE-824"]}