MSRXMSRXSecurity
Vendors / PHP Group

PHP Group vulnerabilities being exploited

2 PHP Group flaws were confirmed exploited in the wild in the past 365 days, across 1 product: PHP. If you run any of them, patch these first.

AddedExploited vulnerabilityFix by
2026-10-26CVE-2026-109619 PHP
PHP Stale Internal Request-State Vulnerability

PHP contains a stale internal request-state vulnerability that allows for unauthenticated remote code execution.

2026-10-29
2026-10-26CVE-2026-109618 PHP
PHP Memory Corruption Vulnerability

PHP contains an out-of-memory corruption vulnerability that allows for unauthenticated remote code execution.

2026-10-29
Watch my PHP Group softwareScan a websiteAll vendors

Source: CISA Known Exploited Vulnerabilities catalog 2026.10.29 (live). A listing means some versions are affected: check yours in the advisory. Guidance only.