[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FD] CVE-2026-109618: PHP-CGI Pointer Underflow → Remote Code Execution (CVSS 9.2)

To: fulldisclosure@xxxxxxxxxxxx
Subject: Re: [FD] CVE-2026-109618: PHP-CGI Pointer Underflow → Remote Code Execution (CVSS 9.2)
From: fulldisclosure <fulldisclosure@xxxxxxxxxxxxxxxxxxxx>
Date: Tue, 27 Oct 2026 09:49:47 +0100

Am 21.10.26 um 07:23 schrieb jose:

CVE-2026-109618: Pointer underflow in PHP's CGI SAPI enables
unauthenticated remote code execution.

that is the CVE for the OOM RCE vulnerability in fpm and mod_php. Sureyou got the right on?



Best regards,
Marius

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: https://seclists.org/fulldisclosure/

References:
- [FD] CVE-2026-109618: PHP-CGI Pointer Underflow → Remote Code Execution (CVSS 9.2)
  - From: jose

Prev by Date: [FD] Maximised JSON Array Attacks -- "Let the Commas Hit the Floor" Proof of Concept
Next by Date: [FD] [0day-rubbish] Moxa MAR-2000 firmware FWR_MAR2000_V1.0_Build_15010909 command injection in the Executer program activation path (7.2)
Previous by thread: [FD] CVE-2026-109618: PHP-CGI Pointer Underflow → Remote Code Execution (CVSS 9.2)
Next by thread: [FD] APPLE-SA-10-26-2026-1 iOS 27.2 and iPadOS 27.2
Index(es):
- Date
- Thread