{"schema":"vulnpedia.research/1","cve":"CVE-2026-10961","references":[{"url":"https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html","tags":["Vendor Advisory","vendor-reference"],"source":"mitre","sourceId":"Chrome","modified":"2026-06-04T23:03:57.167Z","origins":[{"source":"mitre","sourceId":"Chrome","modified":"2026-06-04T23:03:57.167Z","url":"https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html"},{"source":"nvd","sourceId":"CVE-2026-10961","modified":"2026-07-22T20:10:00.127","url":"https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html"},{"source":"redhat","sourceId":"CVE-2026-10961","modified":"2026-06-28T07:14:50+00:00","url":"https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html"}]},{"url":"https://issues.chromium.org/issues/508281950","tags":["Permissions Required"],"source":"mitre","sourceId":"Chrome","modified":"2026-06-04T23:03:57.167Z","origins":[{"source":"mitre","sourceId":"Chrome","modified":"2026-06-04T23:03:57.167Z","url":"https://issues.chromium.org/issues/508281950"},{"source":"nvd","sourceId":"CVE-2026-10961","modified":"2026-07-22T20:10:00.127","url":"https://issues.chromium.org/issues/508281950"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-10961.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-10961","modified":"2026-06-28T07:14:50+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-10961","modified":"2026-06-28T07:14:50+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-10961.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-10961","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-10961","modified":"2026-06-28T07:14:50+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-10961","modified":"2026-06-28T07:14:50+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-10961"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-10961","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-10961","modified":"2026-06-28T07:14:50+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-10961","modified":"2026-06-28T07:14:50+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-10961"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-10961","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-10961","modified":"2026-06-28T07:14:50+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-10961","modified":"2026-06-28T07:14:50+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-10961"}]},{"source":"euvd","sourceId":"EUVD-2026-34410","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-34410","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-34410","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-34410"}]}],"packages":[],"pocCandidates":[{"url":"https://github.com/dinosn/php-cve-2026-10961x-lab-poc","source":"poc-in-github","sourceId":"CVE-2026-10961","description":"PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12","modified":"2026-10-25T20:41:38Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-10961","url":"https://github.com/dinosn/php-cve-2026-10961x-lab-poc"},{"source":"poc-in-github","sourceId":"CVE-2026-10961","modified":"2026-10-25T20:41:38Z","url":"https://github.com/dinosn/php-cve-2026-10961x-lab-poc"}],"tags":[]}],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-10961","modified":"2026-06-28T07:14:50+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-10961.json","productId":"red_hat_products","product":"All currently supported Red Hat products","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","origins":[{"source":"redhat","sourceId":"CVE-2026-10961","modified":"2026-06-28T07:14:50+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-10961.json"}]}],"vendorCoverage":{"total":1,"shown":1,"omitted":0,"source":"redhat"}}