{"schema":"vulnpedia.research/1","cve":"CVE-2026-109619","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp","tags":["vendor-advisory","Mitigation","Vendor Advisory","vendor-reference"],"source":"mitre","sourceId":"php","modified":"2026-10-21T13:54:43.866Z","origins":[{"source":"mitre","sourceId":"php","modified":"2026-10-21T13:54:43.866Z","url":"https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp"},{"source":"nvd","sourceId":"CVE-2026-109619","modified":"2026-10-23T16:06:48.917","url":"https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp"},{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp"}]},{"url":"https://www.wiz.io/blog/php2shell-php-rce","tags":["third-party-advisory","Third Party Advisory"],"source":"mitre","sourceId":"CISA-ADP","modified":"2026-10-22T23:04:20.904Z","origins":[{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-10-22T23:04:20.904Z","url":"https://www.wiz.io/blog/php2shell-php-rce"},{"source":"nvd","sourceId":"CVE-2026-109619","modified":"2026-10-23T16:06:48.917","url":"https://www.wiz.io/blog/php2shell-php-rce"}]},{"url":"http://www.openwall.com/lists/oss-security/2026/10/21/7","tags":["Mailing List","Third Party Advisory"],"source":"mitre","sourceId":"CVE","modified":"2026-10-23T14:07:57.152Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2026-10-23T14:07:57.152Z","url":"http://www.openwall.com/lists/oss-security/2026/10/21/7"},{"source":"nvd","sourceId":"CVE-2026-109619","modified":"2026-10-23T16:06:48.917","url":"http://www.openwall.com/lists/oss-security/2026/10/21/7"}]},{"url":"http://www.openwall.com/lists/oss-security/2026/10/21/16","tags":["Mailing List","Third Party Advisory"],"source":"mitre","sourceId":"CVE","modified":"2026-10-23T14:07:57.152Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2026-10-23T14:07:57.152Z","url":"http://www.openwall.com/lists/oss-security/2026/10/21/16"},{"source":"nvd","sourceId":"CVE-2026-109619","modified":"2026-10-23T16:06:48.917","url":"http://www.openwall.com/lists/oss-security/2026/10/21/16"}]},{"url":"http://www.openwall.com/lists/oss-security/2026/10/21/17","tags":["Mailing List","Third Party Advisory"],"source":"mitre","sourceId":"CVE","modified":"2026-10-23T14:07:57.152Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2026-10-23T14:07:57.152Z","url":"http://www.openwall.com/lists/oss-security/2026/10/21/17"},{"source":"nvd","sourceId":"CVE-2026-109619","modified":"2026-10-23T16:06:48.917","url":"http://www.openwall.com/lists/oss-security/2026/10/21/17"}]},{"url":"http://www.openwall.com/lists/oss-security/2026/10/21/23","tags":["Mailing List","Third Party Advisory"],"source":"mitre","sourceId":"CVE","modified":"2026-10-23T14:07:57.152Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2026-10-23T14:07:57.152Z","url":"http://www.openwall.com/lists/oss-security/2026/10/21/23"},{"source":"nvd","sourceId":"CVE-2026-109619","modified":"2026-10-23T16:06:48.917","url":"http://www.openwall.com/lists/oss-security/2026/10/21/23"}]},{"url":"http://www.openwall.com/lists/oss-security/2026/10/22/2","tags":["Mailing List","Third Party Advisory"],"source":"mitre","sourceId":"CVE","modified":"2026-10-23T14:07:57.152Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2026-10-23T14:07:57.152Z","url":"http://www.openwall.com/lists/oss-security/2026/10/22/2"},{"source":"nvd","sourceId":"CVE-2026-109619","modified":"2026-10-23T16:06:48.917","url":"http://www.openwall.com/lists/oss-security/2026/10/22/2"}]},{"url":"http://www.openwall.com/lists/oss-security/2026/10/22/14","tags":["Mailing List","Third Party Advisory"],"source":"mitre","sourceId":"CVE","modified":"2026-10-23T14:07:57.152Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2026-10-23T14:07:57.152Z","url":"http://www.openwall.com/lists/oss-security/2026/10/22/14"},{"source":"nvd","sourceId":"CVE-2026-109619","modified":"2026-10-23T16:06:48.917","url":"http://www.openwall.com/lists/oss-security/2026/10/22/14"}]},{"url":"http://www.openwall.com/lists/oss-security/2026/10/22/15","tags":["Mailing List","Third Party Advisory"],"source":"mitre","sourceId":"CVE","modified":"2026-10-23T14:07:57.152Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2026-10-23T14:07:57.152Z","url":"http://www.openwall.com/lists/oss-security/2026/10/22/15"},{"source":"nvd","sourceId":"CVE-2026-109619","modified":"2026-10-23T16:06:48.917","url":"http://www.openwall.com/lists/oss-security/2026/10/22/15"}]},{"url":"http://www.openwall.com/lists/oss-security/2026/10/22/16","tags":["Mailing List","Third Party Advisory"],"source":"mitre","sourceId":"CVE","modified":"2026-10-23T14:07:57.152Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2026-10-23T14:07:57.152Z","url":"http://www.openwall.com/lists/oss-security/2026/10/22/16"},{"source":"nvd","sourceId":"CVE-2026-109619","modified":"2026-10-23T16:06:48.917","url":"http://www.openwall.com/lists/oss-security/2026/10/22/16"}]},{"url":"http://www.openwall.com/lists/oss-security/2026/10/22/19","tags":["Mailing List","Third Party Advisory"],"source":"mitre","sourceId":"CVE","modified":"2026-10-23T14:07:57.152Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2026-10-23T14:07:57.152Z","url":"http://www.openwall.com/lists/oss-security/2026/10/22/19"},{"source":"nvd","sourceId":"CVE-2026-109619","modified":"2026-10-23T16:06:48.917","url":"http://www.openwall.com/lists/oss-security/2026/10/22/19"}]},{"url":"http://www.openwall.com/lists/oss-security/2026/10/22/20","tags":["Mailing List","Third Party Advisory"],"source":"mitre","sourceId":"CVE","modified":"2026-10-23T14:07:57.152Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2026-10-23T14:07:57.152Z","url":"http://www.openwall.com/lists/oss-security/2026/10/22/20"},{"source":"nvd","sourceId":"CVE-2026-109619","modified":"2026-10-23T16:06:48.917","url":"http://www.openwall.com/lists/oss-security/2026/10/22/20"}]},{"url":"http://www.openwall.com/lists/oss-security/2026/10/23/4","tags":["Mailing List","Third Party Advisory"],"source":"mitre","sourceId":"CVE","modified":"2026-10-23T14:07:57.152Z","origins":[{"source":"mitre","sourceId":"CVE","modified":"2026-10-23T14:07:57.152Z","url":"http://www.openwall.com/lists/oss-security/2026/10/23/4"},{"source":"nvd","sourceId":"CVE-2026-109619","modified":"2026-10-23T16:06:48.917","url":"http://www.openwall.com/lists/oss-security/2026/10/23/4"}]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-566512.html","tags":["Third Party Advisory"],"source":"mitre","sourceId":"siemens-SADP","modified":"2026-10-23T13:15:15.440Z","origins":[{"source":"mitre","sourceId":"siemens-SADP","modified":"2026-10-23T13:15:15.440Z","url":"https://cert-portal.siemens.com/productcert/html/ssa-566512.html"},{"source":"nvd","sourceId":"CVE-2026-109619","modified":"2026-10-23T16:06:48.917","url":"https://cert-portal.siemens.com/productcert/html/ssa-566512.html"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109619","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-109619"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2554177","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2554177"}]},{"url":"https://access.redhat.com/security/vulnerabilities/RHSB-2026-013","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://access.redhat.com/security/vulnerabilities/RHSB-2026-013"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-109619","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-109619"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109619","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109619"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:88693","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://access.redhat.com/errata/RHSA-2026:88693"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:87070","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://access.redhat.com/errata/RHSA-2026:87070"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:87080","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://access.redhat.com/errata/RHSA-2026:87080"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:88533","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://access.redhat.com/errata/RHSA-2026:88533"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:88659","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://access.redhat.com/errata/RHSA-2026:88659"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:88835","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://access.redhat.com/errata/RHSA-2026:88835"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:88834","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://access.redhat.com/errata/RHSA-2026:88834"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:87072","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://access.redhat.com/errata/RHSA-2026:87072"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:87414","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://access.redhat.com/errata/RHSA-2026:87414"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:88561","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://access.redhat.com/errata/RHSA-2026:88561"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:87071","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://access.redhat.com/errata/RHSA-2026:87071"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:87073","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://access.redhat.com/errata/RHSA-2026:87073"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:88565","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://access.redhat.com/errata/RHSA-2026:88565"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:88532","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://access.redhat.com/errata/RHSA-2026:88532"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:88725","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://access.redhat.com/errata/RHSA-2026:88725"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:88720","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://access.redhat.com/errata/RHSA-2026:88720"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:87079","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://access.redhat.com/errata/RHSA-2026:87079"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:87151","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://access.redhat.com/errata/RHSA-2026:87151"}]},{"source":"euvd","sourceId":"EUVD-2026-107265","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-107265","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-107265","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-107265"}]},{"url":"https://vulncheck.com/kev","tags":["ADVISORY"],"source":"vulncheck-kev","sourceId":"CVE-2026-109619","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-109619","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-109619&date=2026-10-21","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-109619","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-109619","modified":"2026-10-21T00:00:00Z","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-109619&date=2026-10-21"}]},{"url":"https://aws.amazon.com/blogs/security/amazon-threat-intelligence-identifies-php2shell-exploitation-prior-to-public-disclosure-in-madpot/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-109619","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-109619","modified":"2026-10-21T00:00:00Z","url":"https://aws.amazon.com/blogs/security/amazon-threat-intelligence-identifies-php2shell-exploitation-prior-to-public-disclosure-in-madpot/"}]},{"url":"https://watchtowr.com/intelligence/php-remote-code-execution-php2shell/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-109619","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-109619","modified":"2026-10-21T00:00:00Z","url":"https://watchtowr.com/intelligence/php-remote-code-execution-php2shell/"}]},{"url":"https://www.fastly.com/blog/fastlys-proactive-protection-critical-php-rce-cve-2026-109618","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-109619","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-109619","modified":"2026-10-21T00:00:00Z","url":"https://www.fastly.com/blog/fastlys-proactive-protection-critical-php-rce-cve-2026-109618"}]},{"url":"https://www.sophos.com/en-us/blog/proof-of-concept-exploit-released-for-php-vulnerabilities-109618-109619","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-109619","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-109619","modified":"2026-10-21T00:00:00Z","url":"https://www.sophos.com/en-us/blog/proof-of-concept-exploit-released-for-php-vulnerabilities-109618-109619"}]},{"url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-109619&date=2026-10-22","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-109619","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-109619","modified":"2026-10-21T00:00:00Z","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-109619&date=2026-10-22"}]},{"url":"https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-109619","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-109619","modified":"2026-10-21T00:00:00Z","url":"https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/"}]},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-10-22&host_type=src&vulnerability=cve-2026-109619","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-109619","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-109619","modified":"2026-10-21T00:00:00Z","url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-10-22&host_type=src&vulnerability=cve-2026-109619"}]},{"url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-109619&date=2026-10-23","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-109619","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-109619","modified":"2026-10-21T00:00:00Z","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-109619&date=2026-10-23"}]},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-10-23&host_type=src&vulnerability=cve-2026-109619","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-109619","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-109619","modified":"2026-10-21T00:00:00Z","url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-10-23&host_type=src&vulnerability=cve-2026-109619"}]},{"url":"https://unit42.paloaltonetworks.com/cve-2026-109618-cve-2026-109619/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-109619","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-109619","modified":"2026-10-21T00:00:00Z","url":"https://unit42.paloaltonetworks.com/cve-2026-109618-cve-2026-109619/"}]},{"url":"https://x.com/klrgrz/status/2113780927952236580","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-109619","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-109619","modified":"2026-10-21T00:00:00Z","url":"https://x.com/klrgrz/status/2113780927952236580"}]},{"url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-109619&date=2026-10-24","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-109619","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-109619","modified":"2026-10-21T00:00:00Z","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-109619&date=2026-10-24"}]},{"url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-109619&date=2026-10-25","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-109619","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-109619","modified":"2026-10-21T00:00:00Z","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-109619&date=2026-10-25"}]},{"url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-109619&date=2026-10-26","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-109619","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-109619","modified":"2026-10-21T00:00:00Z","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-109619&date=2026-10-26"}]},{"url":"https://vulncheck.com/xdb/d2c5e64d091d","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"d2c5e64d091d","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"d2c5e64d091d","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/d2c5e64d091d"}]},{"url":"https://github.com/cereZ23/php-up-2026","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"d2c5e64d091d","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"d2c5e64d091d","modified":"2026-10-21T00:00:00Z","url":"https://github.com/cereZ23/php-up-2026"}]},{"url":"https://vulncheck.com/xdb/fe74549ca89f","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"fe74549ca89f","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"fe74549ca89f","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/fe74549ca89f"}]},{"url":"https://github.com/murrez/php2shell","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"fe74549ca89f","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"fe74549ca89f","modified":"2026-10-21T00:00:00Z","url":"https://github.com/murrez/php2shell"}]},{"url":"https://vulncheck.com/xdb/419b22bb0c9d","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"419b22bb0c9d","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"419b22bb0c9d","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/419b22bb0c9d"}]},{"url":"https://github.com/anmolksachan/php2shell","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"419b22bb0c9d","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"419b22bb0c9d","modified":"2026-10-21T00:00:00Z","url":"https://github.com/anmolksachan/php2shell"}]},{"url":"https://vulncheck.com/xdb/afee80097430","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"afee80097430","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"afee80097430","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/afee80097430"}]},{"url":"https://github.com/unlimit0118/CVE-2026-109619-php2shell-poc","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"afee80097430","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"afee80097430","modified":"2026-10-21T00:00:00Z","url":"https://github.com/unlimit0118/CVE-2026-109619-php2shell-poc"}]},{"url":"https://vulncheck.com/xdb/a13385ce95a0","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"a13385ce95a0","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"a13385ce95a0","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/a13385ce95a0"}]},{"url":"https://github.com/Felix3322/PHP-uniDoS","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"a13385ce95a0","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"a13385ce95a0","modified":"2026-10-21T00:00:00Z","url":"https://github.com/Felix3322/PHP-uniDoS"}]},{"url":"https://vulncheck.com/xdb/cc63afbc2556","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"cc63afbc2556","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"cc63afbc2556","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/cc63afbc2556"}]},{"url":"https://github.com/al4n4n/php2shell","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"cc63afbc2556","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"cc63afbc2556","modified":"2026-10-21T00:00:00Z","url":"https://github.com/al4n4n/php2shell"}]},{"url":"https://vulncheck.com/xdb/b97bbc624879","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"b97bbc624879","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"b97bbc624879","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/b97bbc624879"}]},{"url":"https://github.com/david-alvarez-rosa/php-rce","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"b97bbc624879","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"b97bbc624879","modified":"2026-10-21T00:00:00Z","url":"https://github.com/david-alvarez-rosa/php-rce"}]},{"url":"https://vulncheck.com/xdb/1de913151c37","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"1de913151c37","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"1de913151c37","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/1de913151c37"}]},{"url":"https://github.com/cozybear-dev/cve-2026-109619","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"1de913151c37","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"1de913151c37","modified":"2026-10-21T00:00:00Z","url":"https://github.com/cozybear-dev/cve-2026-109619"}]},{"url":"https://vulncheck.com/xdb/5b4ee6f3e6d9","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"5b4ee6f3e6d9","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"5b4ee6f3e6d9","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/5b4ee6f3e6d9"}]},{"url":"https://github.com/FranklinF25/php2shell","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"5b4ee6f3e6d9","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"5b4ee6f3e6d9","modified":"2026-10-21T00:00:00Z","url":"https://github.com/FranklinF25/php2shell"}]},{"url":"https://vulncheck.com/xdb/350f85b61e0d","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"350f85b61e0d","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"350f85b61e0d","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/350f85b61e0d"}]},{"url":"https://github.com/alvarodh5/php2shell","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"350f85b61e0d","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"350f85b61e0d","modified":"2026-10-21T00:00:00Z","url":"https://github.com/alvarodh5/php2shell"}]},{"url":"https://vulncheck.com/xdb/9efa914b5033","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"9efa914b5033","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"9efa914b5033","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/9efa914b5033"}]},{"url":"https://github.com/Stonlifer/php2shell","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"9efa914b5033","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"9efa914b5033","modified":"2026-10-21T00:00:00Z","url":"https://github.com/Stonlifer/php2shell"}]},{"url":"https://vulncheck.com/xdb/96b45c265779","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"96b45c265779","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"96b45c265779","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/96b45c265779"}]},{"url":"https://github.com/devploit/php2shell","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"96b45c265779","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"96b45c265779","modified":"2026-10-21T00:00:00Z","url":"https://github.com/devploit/php2shell"}]},{"url":"https://vulncheck.com/xdb/f463c5f17bbf","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"f463c5f17bbf","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"f463c5f17bbf","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/f463c5f17bbf"}]},{"url":"https://github.com/Marven11/PHP2Shell-PoC","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"f463c5f17bbf","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"f463c5f17bbf","modified":"2026-10-21T00:00:00Z","url":"https://github.com/Marven11/PHP2Shell-PoC"}]},{"url":"https://vulncheck.com/xdb/ca79732b1bd3","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"ca79732b1bd3","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"ca79732b1bd3","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/ca79732b1bd3"}]},{"url":"https://github.com/HORKimhab/CVE-2026-109618-619","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"ca79732b1bd3","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"ca79732b1bd3","modified":"2026-10-21T00:00:00Z","url":"https://github.com/HORKimhab/CVE-2026-109618-619"}]},{"url":"https://vulncheck.com/xdb/18c0133ad077","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"18c0133ad077","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"18c0133ad077","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/18c0133ad077"}]},{"url":"https://github.com/WildanDeveloper/php2shell","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"18c0133ad077","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"18c0133ad077","modified":"2026-10-21T00:00:00Z","url":"https://github.com/WildanDeveloper/php2shell"}]},{"url":"https://vulncheck.com/xdb/89f8fe966074","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"89f8fe966074","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"89f8fe966074","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/89f8fe966074"}]},{"url":"https://github.com/4B3R4M4-607D/php2shell","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"89f8fe966074","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"89f8fe966074","modified":"2026-10-21T00:00:00Z","url":"https://github.com/4B3R4M4-607D/php2shell"}]},{"url":"https://vulncheck.com/xdb/488e371c3b4b","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"488e371c3b4b","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"488e371c3b4b","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/488e371c3b4b"}]},{"url":"https://github.com/joshuarosato/php2shell-poc","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"488e371c3b4b","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"488e371c3b4b","modified":"2026-10-21T00:00:00Z","url":"https://github.com/joshuarosato/php2shell-poc"}]},{"url":"https://vulncheck.com/xdb/11591cf3fae4","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"11591cf3fae4","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"11591cf3fae4","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/11591cf3fae4"}]},{"url":"https://github.com/segfo/php2shell-poc","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"11591cf3fae4","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"11591cf3fae4","modified":"2026-10-21T00:00:00Z","url":"https://github.com/segfo/php2shell-poc"}]},{"url":"https://vulncheck.com/xdb/108de6a83877","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"108de6a83877","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"108de6a83877","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/108de6a83877"}]},{"url":"https://github.com/open0x01/php2shell","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"108de6a83877","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"108de6a83877","modified":"2026-10-21T00:00:00Z","url":"https://github.com/open0x01/php2shell"}]},{"url":"https://vulncheck.com/xdb/6b1c6f3b8ab8","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"6b1c6f3b8ab8","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"6b1c6f3b8ab8","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/6b1c6f3b8ab8"}]},{"url":"https://github.com/pattingbabies/php2shell-CVE-2026-109618-109619","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"6b1c6f3b8ab8","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"6b1c6f3b8ab8","modified":"2026-10-21T00:00:00Z","url":"https://github.com/pattingbabies/php2shell-CVE-2026-109618-109619"}]},{"url":"https://vulncheck.com/xdb/e5943f3a5adf","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"e5943f3a5adf","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"e5943f3a5adf","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/e5943f3a5adf"}]},{"url":"https://github.com/chamrouensqa/php2shell-cve-poc","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"e5943f3a5adf","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"e5943f3a5adf","modified":"2026-10-21T00:00:00Z","url":"https://github.com/chamrouensqa/php2shell-cve-poc"}]},{"url":"https://vulncheck.com/xdb/3ee3cc942b69","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"3ee3cc942b69","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"3ee3cc942b69","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/3ee3cc942b69"}]},{"url":"https://github.com/SanWRoot/php2shell-LAB-POC-","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"3ee3cc942b69","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"3ee3cc942b69","modified":"2026-10-21T00:00:00Z","url":"https://github.com/SanWRoot/php2shell-LAB-POC-"}]},{"url":"https://vulncheck.com/xdb/147e93dfb96d","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"147e93dfb96d","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"147e93dfb96d","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/147e93dfb96d"}]},{"url":"https://github.com/mazdel/php2shell-poc","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"147e93dfb96d","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"147e93dfb96d","modified":"2026-10-21T00:00:00Z","url":"https://github.com/mazdel/php2shell-poc"}]},{"url":"https://vulncheck.com/xdb/025ae90c5210","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"025ae90c5210","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"025ae90c5210","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/025ae90c5210"}]},{"url":"https://github.com/LHeiakim/php2shell-full-poc","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"025ae90c5210","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"025ae90c5210","modified":"2026-10-21T00:00:00Z","url":"https://github.com/LHeiakim/php2shell-full-poc"}]},{"url":"https://vulncheck.com/xdb/c13e0ced5741","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"c13e0ced5741","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"c13e0ced5741","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/c13e0ced5741"}]},{"url":"https://github.com/Marciano-Morinigo/php2shell-CVE-2026-109618-CVE-2026-109619-PoC-Lab","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"c13e0ced5741","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"c13e0ced5741","modified":"2026-10-21T00:00:00Z","url":"https://github.com/Marciano-Morinigo/php2shell-CVE-2026-109618-CVE-2026-109619-PoC-Lab"}]},{"url":"https://vulncheck.com/xdb/57db94e7f60d","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"57db94e7f60d","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"57db94e7f60d","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/57db94e7f60d"}]},{"url":"https://github.com/definitiveref/php2shell-CVE-2026-109618-109619-Research","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"57db94e7f60d","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"57db94e7f60d","modified":"2026-10-21T00:00:00Z","url":"https://github.com/definitiveref/php2shell-CVE-2026-109618-109619-Research"}]},{"url":"https://vulncheck.com/xdb/8f48fdd7f165","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"8f48fdd7f165","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"8f48fdd7f165","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/8f48fdd7f165"}]},{"url":"https://github.com/memuratozturk/php2shell-poc","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"8f48fdd7f165","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"8f48fdd7f165","modified":"2026-10-21T00:00:00Z","url":"https://github.com/memuratozturk/php2shell-poc"}]},{"url":"https://vulncheck.com/xdb/b195732528c3","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"b195732528c3","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"b195732528c3","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/b195732528c3"}]},{"url":"https://github.com/RuanSerraAzul/CVE-2026-109619-POC","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"b195732528c3","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"b195732528c3","modified":"2026-10-21T00:00:00Z","url":"https://github.com/RuanSerraAzul/CVE-2026-109619-POC"}]},{"url":"https://vulncheck.com/xdb/0e36a61275ca","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"0e36a61275ca","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"0e36a61275ca","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/0e36a61275ca"}]},{"url":"https://github.com/bigb0x/php2shell-poc","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"0e36a61275ca","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"0e36a61275ca","modified":"2026-10-21T00:00:00Z","url":"https://github.com/bigb0x/php2shell-poc"}]},{"url":"https://vulncheck.com/xdb/0c61dbebd37a","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"0c61dbebd37a","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"0c61dbebd37a","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/0c61dbebd37a"}]},{"url":"https://github.com/leonewt0n/php2shell-poc","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"0c61dbebd37a","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"0c61dbebd37a","modified":"2026-10-21T00:00:00Z","url":"https://github.com/leonewt0n/php2shell-poc"}]},{"url":"https://vulncheck.com/xdb/47d895e8edd9","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"47d895e8edd9","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"47d895e8edd9","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/47d895e8edd9"}]},{"url":"https://github.com/renyang-create/php2shell-repro","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"47d895e8edd9","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"47d895e8edd9","modified":"2026-10-21T00:00:00Z","url":"https://github.com/renyang-create/php2shell-repro"}]},{"url":"https://vulncheck.com/xdb/76114404529d","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"76114404529d","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"76114404529d","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/76114404529d"}]},{"url":"https://github.com/MRdark-ops/php2shell","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"76114404529d","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"76114404529d","modified":"2026-10-21T00:00:00Z","url":"https://github.com/MRdark-ops/php2shell"}]},{"url":"https://vulncheck.com/xdb/3ab3f8f0809f","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"3ab3f8f0809f","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"3ab3f8f0809f","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/3ab3f8f0809f"}]},{"url":"https://github.com/LeisureLinux/php2shell","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"3ab3f8f0809f","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"3ab3f8f0809f","modified":"2026-10-21T00:00:00Z","url":"https://github.com/LeisureLinux/php2shell"}]},{"url":"https://vulncheck.com/xdb/5f018492f442","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"5f018492f442","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"5f018492f442","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/5f018492f442"}]},{"url":"https://github.com/EQSTLab/CVE-2026-109619","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"5f018492f442","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"5f018492f442","modified":"2026-10-21T00:00:00Z","url":"https://github.com/EQSTLab/CVE-2026-109619"}]},{"url":"https://vulncheck.com/xdb/794a31805a84","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"794a31805a84","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"794a31805a84","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/794a31805a84"}]},{"url":"https://github.com/umair-aziz025/PHP2Shell","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"794a31805a84","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"794a31805a84","modified":"2026-10-21T00:00:00Z","url":"https://github.com/umair-aziz025/PHP2Shell"}]},{"url":"https://vulncheck.com/xdb/fa755ba28300","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"fa755ba28300","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"fa755ba28300","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/fa755ba28300"}]},{"url":"https://github.com/Kyros0324/CVE2026","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"fa755ba28300","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"fa755ba28300","modified":"2026-10-21T00:00:00Z","url":"https://github.com/Kyros0324/CVE2026"}]},{"url":"https://vulncheck.com/xdb/a797b02a2d15","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"a797b02a2d15","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"a797b02a2d15","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/a797b02a2d15"}]},{"url":"https://github.com/DarynOngera/solid-palm-tree","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"a797b02a2d15","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"a797b02a2d15","modified":"2026-10-21T00:00:00Z","url":"https://github.com/DarynOngera/solid-palm-tree"}]},{"url":"https://vulncheck.com/xdb/56a688eb716f","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"56a688eb716f","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"56a688eb716f","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/56a688eb716f"}]},{"url":"https://github.com/agrresore/php2shell","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"56a688eb716f","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"56a688eb716f","modified":"2026-10-21T00:00:00Z","url":"https://github.com/agrresore/php2shell"}]},{"url":"https://vulncheck.com/xdb/aaee58094f00","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"aaee58094f00","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"aaee58094f00","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/aaee58094f00"}]},{"url":"https://github.com/Ls-ComCSIRT/php2shell-scan","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"aaee58094f00","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"aaee58094f00","modified":"2026-10-21T00:00:00Z","url":"https://github.com/Ls-ComCSIRT/php2shell-scan"}]},{"url":"https://vulncheck.com/xdb/ab356d3799c4","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"ab356d3799c4","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"ab356d3799c4","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/ab356d3799c4"}]},{"url":"https://github.com/9hb/php2shell-poc","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"ab356d3799c4","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"ab356d3799c4","modified":"2026-10-21T00:00:00Z","url":"https://github.com/9hb/php2shell-poc"}]},{"url":"https://vulncheck.com/xdb/cae4f1f74438","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"cae4f1f74438","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"cae4f1f74438","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/cae4f1f74438"}]},{"url":"https://github.com/aarsaputra/php2shell","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"cae4f1f74438","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"cae4f1f74438","modified":"2026-10-21T00:00:00Z","url":"https://github.com/aarsaputra/php2shell"}]},{"url":"https://vulncheck.com/xdb/a960e989589c","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"a960e989589c","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"a960e989589c","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/a960e989589c"}]},{"url":"https://github.com/zake1god/php2shell","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"a960e989589c","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"a960e989589c","modified":"2026-10-21T00:00:00Z","url":"https://github.com/zake1god/php2shell"}]},{"url":"https://vulncheck.com/xdb/b72b73806b3b","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"b72b73806b3b","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"b72b73806b3b","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/b72b73806b3b"}]},{"url":"https://github.com/Noshadi-sec/cve-2026-109618-109619-poc","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"b72b73806b3b","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"b72b73806b3b","modified":"2026-10-21T00:00:00Z","url":"https://github.com/Noshadi-sec/cve-2026-109618-109619-poc"}]},{"url":"https://vulncheck.com/xdb/9dfbf67c7875","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"9dfbf67c7875","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"9dfbf67c7875","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/9dfbf67c7875"}]},{"url":"https://github.com/ihsansencan/Php2Shell-Lab","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"9dfbf67c7875","modified":"2026-10-21T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"9dfbf67c7875","modified":"2026-10-21T00:00:00Z","url":"https://github.com/ihsansencan/Php2Shell-Lab"}]}],"packages":[],"pocCandidates":[{"url":"https://github.com/santihabib/CVE-2026-109619","source":"poc-in-github","sourceId":"CVE-2026-109619","description":"CVE-2026-109619: cross-request UAF in PHP session.upload_progress — reproduction, root-cause analysis and full chain to RCE","modified":"2026-10-22T14:11:28Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-109619","url":"https://github.com/santihabib/CVE-2026-109619"},{"source":"poc-in-github","sourceId":"CVE-2026-109619","modified":"2026-10-22T14:11:28Z","url":"https://github.com/santihabib/CVE-2026-109619"}],"tags":[]},{"url":"https://github.com/fmdiscioglu/php-cve-2026-109619-checker","source":"poc-in-github","sourceId":"CVE-2026-109619","description":"Non-destructive affected-version checker for CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) PHP UAF","modified":"2026-10-21T14:39:26Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-109619","url":"https://github.com/fmdiscioglu/php-cve-2026-109619-checker"},{"source":"poc-in-github","sourceId":"CVE-2026-109619","modified":"2026-10-21T14:39:26Z","url":"https://github.com/fmdiscioglu/php-cve-2026-109619-checker"}],"tags":[]},{"url":"https://github.com/unlimit0118/CVE-2026-109619-php2shell-poc","source":"poc-in-github","sourceId":"CVE-2026-109619","description":"Minimal PHP session upload progress use-after-free PoC and Docker lab.","modified":"2026-10-24T13:02:59Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-109619","url":"https://github.com/unlimit0118/CVE-2026-109619-php2shell-poc"},{"source":"poc-in-github","sourceId":"CVE-2026-109619","modified":"2026-10-24T13:02:59Z","url":"https://github.com/unlimit0118/CVE-2026-109619-php2shell-poc"}],"tags":[]},{"url":"https://github.com/LordX404/php2shell-exploit","source":"poc-in-github","sourceId":"CVE-2026-109619","description":"this is a exploit for CVE-2026-109619","modified":"2026-10-22T03:52:03Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-109619","url":"https://github.com/LordX404/php2shell-exploit"},{"source":"poc-in-github","sourceId":"CVE-2026-109619","modified":"2026-10-22T03:52:03Z","url":"https://github.com/LordX404/php2shell-exploit"}],"tags":[]},{"url":"https://github.com/cozybear-dev/cve-2026-109619","source":"poc-in-github","sourceId":"CVE-2026-109619","modified":"2026-10-23T19:44:33Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-109619","url":"https://github.com/cozybear-dev/cve-2026-109619"},{"source":"poc-in-github","sourceId":"CVE-2026-109619","modified":"2026-10-23T19:44:33Z","url":"https://github.com/cozybear-dev/cve-2026-109619"}],"tags":[]},{"url":"https://github.com/1Nightlovel/CVE-2026-109619","source":"poc-in-github","sourceId":"CVE-2026-109619","description":"php2shellscanner","modified":"2026-10-21T19:28:10Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-109619","url":"https://github.com/1Nightlovel/CVE-2026-109619"},{"source":"poc-in-github","sourceId":"CVE-2026-109619","modified":"2026-10-21T19:28:10Z","url":"https://github.com/1Nightlovel/CVE-2026-109619"}],"tags":[]},{"url":"https://github.com/syrex1013/CVE-2026-109619","source":"poc-in-github","sourceId":"CVE-2026-109619","modified":"2026-10-21T19:33:14Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-109619","url":"https://github.com/syrex1013/CVE-2026-109619"},{"source":"poc-in-github","sourceId":"CVE-2026-109619","modified":"2026-10-21T19:33:14Z","url":"https://github.com/syrex1013/CVE-2026-109619"}],"tags":[]},{"url":"https://github.com/basesixtythree/B63-POC-CVE-2026-109619","source":"poc-in-github","sourceId":"CVE-2026-109619","description":"PoC and verification material for CVE-2026-109619 (PHP stale worker-global state)","modified":"2026-10-21T22:51:41Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-109619","url":"https://github.com/basesixtythree/B63-POC-CVE-2026-109619"},{"source":"poc-in-github","sourceId":"CVE-2026-109619","modified":"2026-10-21T22:51:41Z","url":"https://github.com/basesixtythree/B63-POC-CVE-2026-109619"}],"tags":[]},{"url":"https://github.com/VKKKV/php2shell-exp","source":"poc-in-github","sourceId":"CVE-2026-109619","description":"Profile-driven php2shell chain (CVE-2026-109619 class) for stock php:*-apache images; loopback lab only.","modified":"2026-10-22T08:02:56Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-109619","url":"https://github.com/VKKKV/php2shell-exp"},{"source":"poc-in-github","sourceId":"CVE-2026-109619","modified":"2026-10-22T08:02:56Z","url":"https://github.com/VKKKV/php2shell-exp"}],"tags":[]},{"url":"https://github.com/baimaobg/php-cve-2026-109619-lab","source":"poc-in-github","sourceId":"CVE-2026-109619","modified":"2026-10-22T07:49:51Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-109619","url":"https://github.com/baimaobg/php-cve-2026-109619-lab"},{"source":"poc-in-github","sourceId":"CVE-2026-109619","modified":"2026-10-22T07:49:51Z","url":"https://github.com/baimaobg/php-cve-2026-109619-lab"}],"tags":[]},{"url":"https://github.com/Prajjwal-Srivastava/php2shell_scanner","source":"poc-in-github","sourceId":"CVE-2026-109619","description":"Scans a PHP host for CVE-2026-109619 (php2shell): fingerprints it, compares PHP version and build date against fixed releases, checks the advisory's producer and consumer preconditions, then prints a VULNERABLE, NOT VULNERABLE or UNKNOWN verdict with the evidence behind it.","modified":"2026-10-22T10:38:02Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-109619","url":"https://github.com/Prajjwal-Srivastava/php2shell_scanner"},{"source":"poc-in-github","sourceId":"CVE-2026-109619","modified":"2026-10-22T10:38:02Z","url":"https://github.com/Prajjwal-Srivastava/php2shell_scanner"}],"tags":[]},{"url":"https://github.com/RuanSerraAzul/CVE-2026-109619-POC","source":"poc-in-github","sourceId":"CVE-2026-109619","modified":"2026-10-22T13:38:22Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-109619","url":"https://github.com/RuanSerraAzul/CVE-2026-109619-POC"},{"source":"poc-in-github","sourceId":"CVE-2026-109619","modified":"2026-10-22T13:38:22Z","url":"https://github.com/RuanSerraAzul/CVE-2026-109619-POC"}],"tags":[]},{"url":"https://github.com/mazdel/php2shell-poc","source":"poc-in-github","sourceId":"CVE-2026-109619","description":"Zero-dependency Python PoC & Docker Compose reproduction for CVE-2026-109619 via PHP RFC1867 upload progress and opcache.preload. (133 characters)","modified":"2026-10-22T14:31:33Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-109619","url":"https://github.com/mazdel/php2shell-poc"},{"source":"poc-in-github","sourceId":"CVE-2026-109619","modified":"2026-10-22T14:31:33Z","url":"https://github.com/mazdel/php2shell-poc"}],"tags":[]},{"url":"https://github.com/FarhadHosen101/PHP2Shell-CVE-2026-109619","source":"poc-in-github","sourceId":"CVE-2026-109619","description":"Advanced Pre-Auth RCE Exploit for PHP session.upload_progress (CVE-2026-109618 & 109619) by Farhad Hosen.","modified":"2026-10-22T19:40:24Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-109619","url":"https://github.com/FarhadHosen101/PHP2Shell-CVE-2026-109619"},{"source":"poc-in-github","sourceId":"CVE-2026-109619","modified":"2026-10-22T19:40:24Z","url":"https://github.com/FarhadHosen101/PHP2Shell-CVE-2026-109619"}],"tags":[]},{"url":"https://github.com/WallcroftUK/CVE-2026-109619","source":"poc-in-github","sourceId":"CVE-2026-109619","modified":"2026-10-22T20:14:37Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-109619","url":"https://github.com/WallcroftUK/CVE-2026-109619"},{"source":"poc-in-github","sourceId":"CVE-2026-109619","modified":"2026-10-22T20:14:37Z","url":"https://github.com/WallcroftUK/CVE-2026-109619"}],"tags":[]},{"url":"https://github.com/MorphingYU/CVE-2026-109619","source":"poc-in-github","sourceId":"CVE-2026-109619","description":"CVE-2026-109619 docker本地复现环境+Poc","modified":"2026-10-23T03:05:37Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-109619","url":"https://github.com/MorphingYU/CVE-2026-109619"},{"source":"poc-in-github","sourceId":"CVE-2026-109619","modified":"2026-10-23T03:05:37Z","url":"https://github.com/MorphingYU/CVE-2026-109619"}],"tags":[]},{"url":"https://github.com/EQSTLab/CVE-2026-109619","source":"poc-in-github","sourceId":"CVE-2026-109619","description":"PHP2Shell","modified":"2026-10-25T00:28:05Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-109619","url":"https://github.com/EQSTLab/CVE-2026-109619"},{"source":"poc-in-github","sourceId":"CVE-2026-109619","modified":"2026-10-25T00:28:05Z","url":"https://github.com/EQSTLab/CVE-2026-109619"}],"tags":[]},{"url":"https://github.com/DarynOngera/solid-palm-tree","source":"poc-in-github","sourceId":"CVE-2026-109619","description":"CVE-2026-109619 / CVE-2026-109618 PoC","modified":"2026-10-23T18:28:10Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-109619","url":"https://github.com/DarynOngera/solid-palm-tree"},{"source":"poc-in-github","sourceId":"CVE-2026-109619","modified":"2026-10-23T18:28:10Z","url":"https://github.com/DarynOngera/solid-palm-tree"}],"tags":[]},{"url":"https://github.com/fellipgomes/br-php2shell","source":"poc-in-github","sourceId":"CVE-2026-109619","description":"Descubra se sites da internet é vulnerável a php2shell CVE-2026-109619","modified":"2026-10-23T15:05:55Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-109619","url":"https://github.com/fellipgomes/br-php2shell"},{"source":"poc-in-github","sourceId":"CVE-2026-109619","modified":"2026-10-23T15:05:55Z","url":"https://github.com/fellipgomes/br-php2shell"}],"tags":[]},{"url":"https://github.com/aarsaputra/php2shell","source":"poc-in-github","sourceId":"CVE-2026-109619","description":"Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design","modified":"2026-10-26T05:50:42Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-109619","url":"https://github.com/aarsaputra/php2shell"},{"source":"poc-in-github","sourceId":"CVE-2026-109619","modified":"2026-10-26T05:50:42Z","url":"https://github.com/aarsaputra/php2shell"}],"tags":[]},{"url":"https://github.com/Taz1920/cve-2026-109619","source":"poc-in-github","sourceId":"CVE-2026-109619","description":"CVE-2026-109619 PoC lab","modified":"2026-10-24T02:51:47Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-109619","url":"https://github.com/Taz1920/cve-2026-109619"},{"source":"poc-in-github","sourceId":"CVE-2026-109619","modified":"2026-10-24T02:51:47Z","url":"https://github.com/Taz1920/cve-2026-109619"}],"tags":[]},{"url":"https://github.com/abraxas/php-stale-global-uaf","source":"poc-in-github","sourceId":"CVE-2026-109619","description":"PHP 8.5.11 - Critical - Remote - UAF - CVE-2026-109619 PHP2Shell. Same-worker fatal backtrace then INI diagnostic on Apache mod_php. Lab vs 8.5.12. Advisory RCE inferred.","modified":"2026-10-24T04:01:11Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-109619","url":"https://github.com/abraxas/php-stale-global-uaf"},{"source":"poc-in-github","sourceId":"CVE-2026-109619","modified":"2026-10-24T04:01:11Z","url":"https://github.com/abraxas/php-stale-global-uaf"}],"tags":[]},{"url":"https://github.com/franckferman/CVE-2026-109619","source":"poc-in-github","sourceId":"CVE-2026-109619","description":"CVE-2026-109619 - PHP session.upload_progress File Poisoning + LFI RCE (CVSS 9.2)","modified":"2026-10-26T01:55:50Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-109619","url":"https://github.com/franckferman/CVE-2026-109619"},{"source":"poc-in-github","sourceId":"CVE-2026-109619","modified":"2026-10-26T01:55:50Z","url":"https://github.com/franckferman/CVE-2026-109619"}],"tags":[]}],"cataloguedPoc":[{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"d2c5e64d091d","url":"https://vulncheck.com/xdb/d2c5e64d091d","cve":"CVE-2026-109619","dateAdded":"2026-10-21T07:40:59Z","modified":"2026-10-21T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/cereZ23/php-up-2026","observations":[{"dateAdded":"2026-10-21T07:40:59Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"d2c5e64d091d","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/d2c5e64d091d"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"fe74549ca89f","url":"https://vulncheck.com/xdb/fe74549ca89f","cve":"CVE-2026-109619","dateAdded":"2026-10-21T12:37:59Z","modified":"2026-10-21T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/murrez/php2shell","observations":[{"dateAdded":"2026-10-21T12:37:59Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"fe74549ca89f","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/fe74549ca89f"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"419b22bb0c9d","url":"https://vulncheck.com/xdb/419b22bb0c9d","cve":"CVE-2026-109619","dateAdded":"2026-10-21T15:51:22Z","modified":"2026-10-21T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/anmolksachan/php2shell","observations":[{"dateAdded":"2026-10-21T15:51:22Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"419b22bb0c9d","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/419b22bb0c9d"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"afee80097430","url":"https://vulncheck.com/xdb/afee80097430","cve":"CVE-2026-109619","dateAdded":"2026-10-21T16:51:07Z","modified":"2026-10-21T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/unlimit0118/CVE-2026-109619-php2shell-poc","observations":[{"dateAdded":"2026-10-21T16:51:07Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"afee80097430","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/afee80097430"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"a13385ce95a0","url":"https://vulncheck.com/xdb/a13385ce95a0","cve":"CVE-2026-109619","dateAdded":"2026-10-21T17:10:12Z","modified":"2026-10-21T00:00:00Z","exploitType":"denial-of-service","repositoryUrl":"https://github.com/Felix3322/PHP-uniDoS","observations":[{"dateAdded":"2026-10-21T17:10:12Z","exploitType":"denial-of-service"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"a13385ce95a0","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/a13385ce95a0"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"cc63afbc2556","url":"https://vulncheck.com/xdb/cc63afbc2556","cve":"CVE-2026-109619","dateAdded":"2026-10-21T17:15:23Z","modified":"2026-10-21T00:00:00Z","exploitType":"denial-of-service","repositoryUrl":"https://github.com/al4n4n/php2shell","observations":[{"dateAdded":"2026-10-21T17:15:23Z","exploitType":"denial-of-service"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"cc63afbc2556","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/cc63afbc2556"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"b97bbc624879","url":"https://vulncheck.com/xdb/b97bbc624879","cve":"CVE-2026-109619","dateAdded":"2026-10-21T17:42:17Z","modified":"2026-10-21T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/david-alvarez-rosa/php-rce","observations":[{"dateAdded":"2026-10-21T17:42:17Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"b97bbc624879","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/b97bbc624879"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"1de913151c37","url":"https://vulncheck.com/xdb/1de913151c37","cve":"CVE-2026-109619","dateAdded":"2026-10-21T19:25:19Z","modified":"2026-10-21T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/cozybear-dev/cve-2026-109619","observations":[{"dateAdded":"2026-10-21T19:25:19Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"1de913151c37","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/1de913151c37"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"5b4ee6f3e6d9","url":"https://vulncheck.com/xdb/5b4ee6f3e6d9","cve":"CVE-2026-109619","dateAdded":"2026-10-21T21:26:07Z","modified":"2026-10-21T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/FranklinF25/php2shell","observations":[{"dateAdded":"2026-10-21T21:26:07Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"5b4ee6f3e6d9","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/5b4ee6f3e6d9"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"350f85b61e0d","url":"https://vulncheck.com/xdb/350f85b61e0d","cve":"CVE-2026-109619","dateAdded":"2026-10-21T22:02:30Z","modified":"2026-10-21T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/alvarodh5/php2shell","observations":[{"dateAdded":"2026-10-21T22:02:30Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"350f85b61e0d","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/350f85b61e0d"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"9efa914b5033","url":"https://vulncheck.com/xdb/9efa914b5033","cve":"CVE-2026-109619","dateAdded":"2026-10-21T22:21:46Z","modified":"2026-10-21T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/Stonlifer/php2shell","observations":[{"dateAdded":"2026-10-21T22:21:46Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"9efa914b5033","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/9efa914b5033"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"96b45c265779","url":"https://vulncheck.com/xdb/96b45c265779","cve":"CVE-2026-109619","dateAdded":"2026-10-21T22:53:01Z","modified":"2026-10-21T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/devploit/php2shell","observations":[{"dateAdded":"2026-10-21T22:53:01Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"96b45c265779","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/96b45c265779"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"f463c5f17bbf","url":"https://vulncheck.com/xdb/f463c5f17bbf","cve":"CVE-2026-109619","dateAdded":"2026-10-21T23:04:47Z","modified":"2026-10-21T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/Marven11/PHP2Shell-PoC","observations":[{"dateAdded":"2026-10-21T23:04:47Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"f463c5f17bbf","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/f463c5f17bbf"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"ca79732b1bd3","url":"https://vulncheck.com/xdb/ca79732b1bd3","cve":"CVE-2026-109619","dateAdded":"2026-10-22T01:26:22Z","modified":"2026-10-21T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/HORKimhab/CVE-2026-109618-619","observations":[{"dateAdded":"2026-10-22T01:26:22Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"ca79732b1bd3","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/ca79732b1bd3"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"18c0133ad077","url":"https://vulncheck.com/xdb/18c0133ad077","cve":"CVE-2026-109619","dateAdded":"2026-10-22T02:55:24Z","modified":"2026-10-21T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/WildanDeveloper/php2shell","observations":[{"dateAdded":"2026-10-22T02:55:24Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"18c0133ad077","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/18c0133ad077"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"89f8fe966074","url":"https://vulncheck.com/xdb/89f8fe966074","cve":"CVE-2026-109619","dateAdded":"2026-10-22T03:05:39Z","modified":"2026-10-21T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/4B3R4M4-607D/php2shell","observations":[{"dateAdded":"2026-10-22T03:05:39Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"89f8fe966074","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/89f8fe966074"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"488e371c3b4b","url":"https://vulncheck.com/xdb/488e371c3b4b","cve":"CVE-2026-109619","dateAdded":"2026-10-22T03:18:20Z","modified":"2026-10-21T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/joshuarosato/php2shell-poc","observations":[{"dateAdded":"2026-10-22T03:18:20Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"488e371c3b4b","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/488e371c3b4b"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"11591cf3fae4","url":"https://vulncheck.com/xdb/11591cf3fae4","cve":"CVE-2026-109619","dateAdded":"2026-10-22T03:24:47Z","modified":"2026-10-21T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/segfo/php2shell-poc","observations":[{"dateAdded":"2026-10-22T03:24:47Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"11591cf3fae4","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/11591cf3fae4"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"108de6a83877","url":"https://vulncheck.com/xdb/108de6a83877","cve":"CVE-2026-109619","dateAdded":"2026-10-22T03:48:50Z","modified":"2026-10-21T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/open0x01/php2shell","observations":[{"dateAdded":"2026-10-22T03:48:50Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"108de6a83877","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/108de6a83877"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"6b1c6f3b8ab8","url":"https://vulncheck.com/xdb/6b1c6f3b8ab8","cve":"CVE-2026-109619","dateAdded":"2026-10-22T05:20:36Z","modified":"2026-10-21T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/pattingbabies/php2shell-CVE-2026-109618-109619","observations":[{"dateAdded":"2026-10-22T05:20:36Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"6b1c6f3b8ab8","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/6b1c6f3b8ab8"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"e5943f3a5adf","url":"https://vulncheck.com/xdb/e5943f3a5adf","cve":"CVE-2026-109619","dateAdded":"2026-10-22T07:13:45Z","modified":"2026-10-21T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/chamrouensqa/php2shell-cve-poc","observations":[{"dateAdded":"2026-10-22T07:13:45Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"e5943f3a5adf","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/e5943f3a5adf"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"3ee3cc942b69","url":"https://vulncheck.com/xdb/3ee3cc942b69","cve":"CVE-2026-109619","dateAdded":"2026-10-22T09:20:02Z","modified":"2026-10-21T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/SanWRoot/php2shell-LAB-POC-","observations":[{"dateAdded":"2026-10-22T09:20:02Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"3ee3cc942b69","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/3ee3cc942b69"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"147e93dfb96d","url":"https://vulncheck.com/xdb/147e93dfb96d","cve":"CVE-2026-109619","dateAdded":"2026-10-22T14:31:20Z","modified":"2026-10-21T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/mazdel/php2shell-poc","observations":[{"dateAdded":"2026-10-22T14:31:20Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"147e93dfb96d","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/147e93dfb96d"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"025ae90c5210","url":"https://vulncheck.com/xdb/025ae90c5210","cve":"CVE-2026-109619","dateAdded":"2026-10-22T15:00:37Z","modified":"2026-10-21T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/LHeiakim/php2shell-full-poc","observations":[{"dateAdded":"2026-10-22T15:00:37Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"025ae90c5210","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/025ae90c5210"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"c13e0ced5741","url":"https://vulncheck.com/xdb/c13e0ced5741","cve":"CVE-2026-109619","dateAdded":"2026-10-22T15:02:14Z","modified":"2026-10-21T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/Marciano-Morinigo/php2shell-CVE-2026-109618-CVE-2026-109619-PoC-Lab","observations":[{"dateAdded":"2026-10-22T15:02:14Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"c13e0ced5741","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/c13e0ced5741"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"57db94e7f60d","url":"https://vulncheck.com/xdb/57db94e7f60d","cve":"CVE-2026-109619","dateAdded":"2026-10-22T16:47:45Z","modified":"2026-10-21T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/definitiveref/php2shell-CVE-2026-109618-109619-Research","observations":[{"dateAdded":"2026-10-22T16:47:45Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"57db94e7f60d","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/57db94e7f60d"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"8f48fdd7f165","url":"https://vulncheck.com/xdb/8f48fdd7f165","cve":"CVE-2026-109619","dateAdded":"2026-10-22T20:00:30Z","modified":"2026-10-21T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/memuratozturk/php2shell-poc","observations":[{"dateAdded":"2026-10-22T20:00:30Z","exploitType":"initial-access"},{"dateAdded":"2026-10-22T22:08:38Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"8f48fdd7f165","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/8f48fdd7f165"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"b195732528c3","url":"https://vulncheck.com/xdb/b195732528c3","cve":"CVE-2026-109619","dateAdded":"2026-10-22T21:03:46Z","modified":"2026-10-21T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/RuanSerraAzul/CVE-2026-109619-POC","observations":[{"dateAdded":"2026-10-22T21:03:46Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"b195732528c3","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/b195732528c3"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"0e36a61275ca","url":"https://vulncheck.com/xdb/0e36a61275ca","cve":"CVE-2026-109619","dateAdded":"2026-10-22T21:07:01Z","modified":"2026-10-21T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/bigb0x/php2shell-poc","observations":[{"dateAdded":"2026-10-22T21:07:01Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"0e36a61275ca","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/0e36a61275ca"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"0c61dbebd37a","url":"https://vulncheck.com/xdb/0c61dbebd37a","cve":"CVE-2026-109619","dateAdded":"2026-10-22T21:10:21Z","modified":"2026-10-21T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/leonewt0n/php2shell-poc","observations":[{"dateAdded":"2026-10-22T21:10:21Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"0c61dbebd37a","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/0c61dbebd37a"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"47d895e8edd9","url":"https://vulncheck.com/xdb/47d895e8edd9","cve":"CVE-2026-109619","dateAdded":"2026-10-23T02:28:18Z","modified":"2026-10-21T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/renyang-create/php2shell-repro","observations":[{"dateAdded":"2026-10-23T02:28:18Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"47d895e8edd9","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/47d895e8edd9"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"76114404529d","url":"https://vulncheck.com/xdb/76114404529d","cve":"CVE-2026-109619","dateAdded":"2026-10-23T03:46:10Z","modified":"2026-10-21T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/MRdark-ops/php2shell","observations":[{"dateAdded":"2026-10-23T03:46:10Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"76114404529d","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/76114404529d"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"3ab3f8f0809f","url":"https://vulncheck.com/xdb/3ab3f8f0809f","cve":"CVE-2026-109619","dateAdded":"2026-10-23T05:21:42Z","modified":"2026-10-21T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/LeisureLinux/php2shell","observations":[{"dateAdded":"2026-10-23T05:21:42Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"3ab3f8f0809f","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/3ab3f8f0809f"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"5f018492f442","url":"https://vulncheck.com/xdb/5f018492f442","cve":"CVE-2026-109619","dateAdded":"2026-10-23T08:22:09Z","modified":"2026-10-21T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/EQSTLab/CVE-2026-109619","observations":[{"dateAdded":"2026-10-23T08:22:09Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"5f018492f442","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/5f018492f442"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"794a31805a84","url":"https://vulncheck.com/xdb/794a31805a84","cve":"CVE-2026-109619","dateAdded":"2026-10-23T09:08:40Z","modified":"2026-10-21T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/umair-aziz025/PHP2Shell","observations":[{"dateAdded":"2026-10-23T09:08:40Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"794a31805a84","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/794a31805a84"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"fa755ba28300","url":"https://vulncheck.com/xdb/fa755ba28300","cve":"CVE-2026-109619","dateAdded":"2026-10-23T09:11:46Z","modified":"2026-10-21T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/Kyros0324/CVE2026","observations":[{"dateAdded":"2026-10-23T09:11:46Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"fa755ba28300","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/fa755ba28300"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"a797b02a2d15","url":"https://vulncheck.com/xdb/a797b02a2d15","cve":"CVE-2026-109619","dateAdded":"2026-10-23T09:41:48Z","modified":"2026-10-21T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/DarynOngera/solid-palm-tree","observations":[{"dateAdded":"2026-10-23T09:41:48Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"a797b02a2d15","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/a797b02a2d15"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"56a688eb716f","url":"https://vulncheck.com/xdb/56a688eb716f","cve":"CVE-2026-109619","dateAdded":"2026-10-23T09:59:01Z","modified":"2026-10-21T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/agrresore/php2shell","observations":[{"dateAdded":"2026-10-23T09:59:01Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"56a688eb716f","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/56a688eb716f"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"aaee58094f00","url":"https://vulncheck.com/xdb/aaee58094f00","cve":"CVE-2026-109619","dateAdded":"2026-10-23T13:05:22Z","modified":"2026-10-21T00:00:00Z","exploitType":"denial-of-service","repositoryUrl":"https://github.com/Ls-ComCSIRT/php2shell-scan","observations":[{"dateAdded":"2026-10-23T13:05:22Z","exploitType":"denial-of-service"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"aaee58094f00","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/aaee58094f00"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"ab356d3799c4","url":"https://vulncheck.com/xdb/ab356d3799c4","cve":"CVE-2026-109619","dateAdded":"2026-10-23T13:10:16Z","modified":"2026-10-21T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/9hb/php2shell-poc","observations":[{"dateAdded":"2026-10-23T13:10:16Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"ab356d3799c4","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/ab356d3799c4"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"cae4f1f74438","url":"https://vulncheck.com/xdb/cae4f1f74438","cve":"CVE-2026-109619","dateAdded":"2026-10-23T13:49:52Z","modified":"2026-10-21T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/aarsaputra/php2shell","observations":[{"dateAdded":"2026-10-23T13:49:52Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"cae4f1f74438","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/cae4f1f74438"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"a960e989589c","url":"https://vulncheck.com/xdb/a960e989589c","cve":"CVE-2026-109619","dateAdded":"2026-10-23T14:01:00Z","modified":"2026-10-21T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/zake1god/php2shell","observations":[{"dateAdded":"2026-10-23T14:01:00Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"a960e989589c","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/a960e989589c"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"b72b73806b3b","url":"https://vulncheck.com/xdb/b72b73806b3b","cve":"CVE-2026-109619","dateAdded":"2026-10-23T15:23:13Z","modified":"2026-10-21T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/Noshadi-sec/cve-2026-109618-109619-poc","observations":[{"dateAdded":"2026-10-23T15:23:13Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"b72b73806b3b","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/b72b73806b3b"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"9dfbf67c7875","url":"https://vulncheck.com/xdb/9dfbf67c7875","cve":"CVE-2026-109619","dateAdded":"2026-10-23T22:02:13Z","modified":"2026-10-21T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/ihsansencan/Php2Shell-Lab","observations":[{"dateAdded":"2026-10-23T22:02:13Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"9dfbf67c7875","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/xdb/9dfbf67c7875"}]}],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json","productId":"7Server-ELS:php-0:5.4.16-48.el7_9.1.ppc64","product":"php-0:5.4.16-48.el7_9.1.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:88693"},{"category":"workaround","details":"See the security bulletin for a detailed mitigation procedure."}],"purl":"pkg:rpm/redhat/php@5.4.16-48.el7_9.1?arch=ppc64","origins":[{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json"}]},{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json","productId":"AppStream-10.2.Z:php-opcache-debuginfo-0:8.3.36-1.el10_2.x86_64","product":"php-opcache-debuginfo-0:8.3.36-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:87070"},{"category":"workaround","details":"See the security bulletin for a detailed mitigation procedure."}],"purl":"pkg:rpm/redhat/php-opcache-debuginfo@8.3.36-1.el10_2?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json"}]},{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json","productId":"AppStream-8.10.0.Z.MAIN.EUS:php-dba-debuginfo-0:7.4.33-8.module+el8.10.0+25117+30337cca.x86_64::php:7.4","product":"php-dba-debuginfo-0:7.4.33-8.module+el8.10.0+25117+30337cca.x86_64 (php:7.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:87080"},{"category":"workaround","details":"See the security bulletin for a detailed mitigation procedure."}],"purl":"pkg:rpm/redhat/php-dba-debuginfo@7.4.33-8.module%2Bel8.10.0%2B25117%2B30337cca?arch=x86_64&rpmmod=php:7.4:8100020261021081045:f7998665","origins":[{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json"}]},{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json","productId":"AppStream-8.10.0.Z.MAIN.EUS:php-pecl-zip-debugsource-0:1.18.2-1.module+el8.10.0+22485+a3539972.ppc64le::php:7.4","product":"php-pecl-zip-debugsource-0:1.18.2-1.module+el8.10.0+22485+a3539972.ppc64le (php:7.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:87080"},{"category":"workaround","details":"See the security bulletin for a detailed mitigation procedure."}],"purl":"pkg:rpm/redhat/php-pecl-zip-debugsource@1.18.2-1.module%2Bel8.10.0%2B22485%2Ba3539972?arch=ppc64le&rpmmod=php:7.4:8100020261021081045:f7998665","origins":[{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json"}]},{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json","productId":"AppStream-8.6.0.Z.EUS.EXTENSION:php-fpm-0:7.4.19-4.module+el8.6.0+25157+c2ff122e.3.x86_64::php:7.4","product":"php-fpm-0:7.4.19-4.module+el8.6.0+25157+c2ff122e.3.x86_64 (php:7.4) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:88533"},{"category":"workaround","details":"See the security bulletin for a detailed mitigation procedure."}],"purl":"pkg:rpm/redhat/php-fpm@7.4.19-4.module%2Bel8.6.0%2B25157%2Bc2ff122e.3?arch=x86_64&rpmmod=php:7.4:8060020261022162503:5caa48ff","origins":[{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json"}]},{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json","productId":"AppStream-9.2.0.Z.E4S:php-fpm-0:8.0.30-1.el9_2.2.aarch64","product":"php-fpm-0:8.0.30-1.el9_2.2.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:88659"},{"category":"workaround","details":"See the security bulletin for a detailed mitigation procedure."}],"purl":"pkg:rpm/redhat/php-fpm@8.0.30-1.el9_2.2?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json"}]},{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json","productId":"AppStream-9.4.0.Z.E4S:php-mbstring-0:8.2.13-1.module+el9.4.0+25177+88c847cf.4.x86_64::php:8.2","product":"php-mbstring-0:8.2.13-1.module+el9.4.0+25177+88c847cf.4.x86_64 (php:8.2) as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:88835"},{"category":"workaround","details":"See the security bulletin for a detailed mitigation procedure."}],"purl":"pkg:rpm/redhat/php-mbstring@8.2.13-1.module%2Bel9.4.0%2B25177%2B88c847cf.4?arch=x86_64&rpmmod=php:8.2:9040020261023103113:9","origins":[{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json"}]},{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json","productId":"AppStream-9.6.0.Z.EUS:php-ffi-debuginfo-0:8.2.28-1.module+el9.6.0+25176+d8415d54.4.s390x::php:8.2","product":"php-ffi-debuginfo-0:8.2.28-1.module+el9.6.0+25176+d8415d54.4.s390x (php:8.2) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:88834"},{"category":"workaround","details":"See the security bulletin for a detailed mitigation procedure."}],"purl":"pkg:rpm/redhat/php-ffi-debuginfo@8.2.28-1.module%2Bel9.6.0%2B25176%2Bd8415d54.4?arch=s390x&rpmmod=php:8.2:9060020261023092136:9","origins":[{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json"}]},{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json","productId":"AppStream-9.8.0.Z.MAIN.EUS:php-common-0:8.2.35-1.module+el9.8.0+25111+a1450321.x86_64::php:8.2","product":"php-common-0:8.2.35-1.module+el9.8.0+25111+a1450321.x86_64 (php:8.2) as a component of Red Hat Enterprise Linux AppStream (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:87072"},{"category":"workaround","details":"See the security bulletin for a detailed mitigation procedure."}],"purl":"pkg:rpm/redhat/php-common@8.2.35-1.module%2Bel9.8.0%2B25111%2Ba1450321?arch=x86_64&rpmmod=php:8.2:9080020261020145734:9","origins":[{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json"}]},{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json","productId":"AppStream-9.8.0.Z.MAIN.EUS:php-opcache-0:8.2.35-1.module+el9.8.0+25111+a1450321.s390x::php:8.2","product":"php-opcache-0:8.2.35-1.module+el9.8.0+25111+a1450321.s390x (php:8.2) as a component of Red Hat Enterprise Linux AppStream (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:87072"},{"category":"workaround","details":"See the security bulletin for a detailed mitigation procedure."}],"purl":"pkg:rpm/redhat/php-opcache@8.2.35-1.module%2Bel9.8.0%2B25111%2Ba1450321?arch=s390x&rpmmod=php:8.2:9080020261020145734:9","origins":[{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json"}]},{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json","productId":"Red Hat Hardened Images:php-xml-0:8.5.12-1.hum1@x86_64","product":"php-xml-0:8.5.12-1.hum1@x86_64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:87414"},{"category":"workaround","details":"See the security bulletin for a detailed mitigation procedure."}],"purl":"pkg:rpm/redhat/php-xml@8.5.12-1.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json"}]},{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json","productId":"red_hat_enterprise_linux_6:php","product":"php as a component of Red Hat Enterprise Linux 6","status":"known_affected","remediations":[{"category":"workaround","details":"See the security bulletin for a detailed mitigation procedure."},{"category":"no_fix_planned","details":"Out of support scope"}],"purl":"pkg:rpm/redhat/php","origins":[{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json"}]},{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json","productId":"red_hat_enterprise_linux_6:php-devel","product":"php-devel as a component of Red Hat Enterprise Linux 6","status":"known_affected","remediations":[{"category":"workaround","details":"See the security bulletin for a detailed mitigation procedure."},{"category":"no_fix_planned","details":"Out of support scope"}],"purl":"pkg:rpm/redhat/php-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json"}]},{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json","productId":"red_hat_enterprise_linux_6:php-intl","product":"php-intl as a component of Red Hat Enterprise Linux 6","status":"known_affected","remediations":[{"category":"workaround","details":"See the security bulletin for a detailed mitigation procedure."},{"category":"no_fix_planned","details":"Out of support scope"}],"purl":"pkg:rpm/redhat/php-intl","origins":[{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json"}]},{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json","productId":"red_hat_enterprise_linux_6:php-pdo","product":"php-pdo as a component of Red Hat Enterprise Linux 6","status":"known_affected","remediations":[{"category":"workaround","details":"See the security bulletin for a detailed mitigation procedure."},{"category":"no_fix_planned","details":"Out of support scope"}],"purl":"pkg:rpm/redhat/php-pdo","origins":[{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json"}]},{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json","productId":"red_hat_enterprise_linux_6:php-soap","product":"php-soap as a component of Red Hat Enterprise Linux 6","status":"known_affected","remediations":[{"category":"workaround","details":"See the security bulletin for a detailed mitigation procedure."},{"category":"no_fix_planned","details":"Out of support scope"}],"purl":"pkg:rpm/redhat/php-soap","origins":[{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json"}]},{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json","productId":"red_hat_enterprise_linux_6:php.src","product":"php.src as a component of Red Hat Enterprise Linux 6","status":"known_affected","remediations":[{"category":"workaround","details":"See the security bulletin for a detailed mitigation procedure."},{"category":"no_fix_planned","details":"Out of support scope"}],"purl":"pkg:rpm/redhat/php?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json"}]},{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json","productId":"red_hat_enterprise_linux_9:php-dbg::php:8.4","product":"php-dbg (php:8.4) as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"See the security bulletin for a detailed mitigation procedure."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/php-dbg?rpmmod=php:8.4","origins":[{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json"}]},{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json","productId":"red_hat_enterprise_linux_9:php-gd::php:8.4","product":"php-gd (php:8.4) as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"See the security bulletin for a detailed mitigation procedure."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/php-gd?rpmmod=php:8.4","origins":[{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json"}]},{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json","productId":"red_hat_enterprise_linux_9:php-mysqlnd::php:8.4","product":"php-mysqlnd (php:8.4) as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"See the security bulletin for a detailed mitigation procedure."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/php-mysqlnd?rpmmod=php:8.4","origins":[{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json"}]},{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json","productId":"red_hat_enterprise_linux_9:php-snmp::php:8.4","product":"php-snmp (php:8.4) as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"See the security bulletin for a detailed mitigation procedure."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/php-snmp?rpmmod=php:8.4","origins":[{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json"}]},{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json","productId":"red_hat_openshift_dev_spaces:devspaces/udi-rhel9","product":"devspaces/udi-rhel9 as a component of Red Hat OpenShift Dev Spaces","status":"known_affected","remediations":[{"category":"workaround","details":"See the security bulletin for a detailed mitigation procedure."},{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/udi-rhel9?repository_url=registry.redhat.io/devspaces/udi-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json"}]},{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json","productId":"7Server-ELS:php-common-0:5.4.16-48.el7_9.1.ppc64","product":"php-common-0:5.4.16-48.el7_9.1.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/php-common@5.4.16-48.el7_9.1?arch=ppc64","origins":[{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json"}]},{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json","productId":"7Server-ELS:php-gd-0:5.4.16-48.el7_9.1.s390x","product":"php-gd-0:5.4.16-48.el7_9.1.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS)","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/php-gd@5.4.16-48.el7_9.1?arch=s390x","origins":[{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json"}]},{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json","productId":"7Server-ELS:php-odbc-0:5.4.16-48.el7_9.1.ppc64le","product":"php-odbc-0:5.4.16-48.el7_9.1.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/php-odbc@5.4.16-48.el7_9.1?arch=ppc64le","origins":[{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json"}]},{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json","productId":"7Server-ELS:php-pgsql-0:5.4.16-48.el7_9.1.x86_64","product":"php-pgsql-0:5.4.16-48.el7_9.1.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/php-pgsql@5.4.16-48.el7_9.1?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json"}]},{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json","productId":"7Server-ELS:php-soap-0:5.4.16-48.el7_9.1.ppc64le","product":"php-soap-0:5.4.16-48.el7_9.1.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/php-soap@5.4.16-48.el7_9.1?arch=ppc64le","origins":[{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json"}]},{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json","productId":"7Server-optional-ELS:php-bcmath-0:5.4.16-48.el7_9.1.ppc64","product":"php-bcmath-0:5.4.16-48.el7_9.1.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/php-bcmath@5.4.16-48.el7_9.1?arch=ppc64","origins":[{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json"}]},{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json","productId":"7Server-optional-ELS:php-debuginfo-0:5.4.16-48.el7_9.1.s390x","product":"php-debuginfo-0:5.4.16-48.el7_9.1.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/php-debuginfo@5.4.16-48.el7_9.1?arch=s390x","origins":[{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json"}]},{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json","productId":"7Server-optional-ELS:php-intl-0:5.4.16-48.el7_9.1.ppc64","product":"php-intl-0:5.4.16-48.el7_9.1.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/php-intl@5.4.16-48.el7_9.1?arch=ppc64","origins":[{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json"}]},{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json","productId":"7Server-optional-ELS:php-mysqlnd-0:5.4.16-48.el7_9.1.x86_64","product":"php-mysqlnd-0:5.4.16-48.el7_9.1.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/php-mysqlnd@5.4.16-48.el7_9.1?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json"}]},{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json","productId":"red_hat_openshift_dev_spaces:devspaces/code-rhel9","product":"devspaces/code-rhel9 as a component of Red Hat OpenShift Dev Spaces","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/code-rhel9?repository_url=registry.redhat.io/devspaces/code-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-109619","modified":"2026-10-24T00:28:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109619.json"}]}],"vendorCoverage":{"total":3853,"shown":32,"omitted":3821,"source":"redhat"},"exploitationSources":[{"source":"vulncheck-kev","sourceId":"CVE-2026-109619","catalog":"VulnCheck KEV","kind":"catalogue","url":"https://vulncheck.com/kev","dateAdded":"2026-10-21T00:00:00Z","modified":"2026-10-21T00:00:00Z","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","knownRansomwareCampaignUse":"Unknown","reportedByVulncheckCanaries":true,"vendorProject":"PHP","product":"PHP","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-109619","modified":"2026-10-21T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-109619","catalog":"VulnCheck KEV","kind":"report","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-109619&date=2026-10-21","dateAdded":"2026-10-21T00:00:00Z","firstPartyCanary":true,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-109619","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-109619&date=2026-10-21"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-109619","catalog":"VulnCheck KEV","kind":"report","url":"https://aws.amazon.com/blogs/security/amazon-threat-intelligence-identifies-php2shell-exploitation-prior-to-public-disclosure-in-madpot/","dateAdded":"2026-10-21T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-109619","url":"https://aws.amazon.com/blogs/security/amazon-threat-intelligence-identifies-php2shell-exploitation-prior-to-public-disclosure-in-madpot/"},{"source":"vulncheck-kev","sourceId":"CVE-2026-109619","url":"https://watchtowr.com/intelligence/php-remote-code-execution-php2shell/"},{"source":"vulncheck-kev","sourceId":"CVE-2026-109619","url":"https://www.fastly.com/blog/fastlys-proactive-protection-critical-php-rce-cve-2026-109618"},{"source":"vulncheck-kev","sourceId":"CVE-2026-109619","url":"https://www.sophos.com/en-us/blog/proof-of-concept-exploit-released-for-php-vulnerabilities-109618-109619"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-109619","catalog":"VulnCheck KEV","kind":"report","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-109619&date=2026-10-22","dateAdded":"2026-10-22T00:00:00Z","firstPartyCanary":true,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-109619","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-109619&date=2026-10-22"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-109619","catalog":"VulnCheck KEV","kind":"report","url":"https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/","dateAdded":"2026-10-22T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-109619","url":"https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/"},{"source":"vulncheck-kev","sourceId":"CVE-2026-109619","url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-10-22&host_type=src&vulnerability=cve-2026-109619"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-109619","catalog":"VulnCheck KEV","kind":"report","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-109619&date=2026-10-23","dateAdded":"2026-10-23T00:00:00Z","firstPartyCanary":true,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-109619","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-109619&date=2026-10-23"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-109619","catalog":"VulnCheck KEV","kind":"report","url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-10-23&host_type=src&vulnerability=cve-2026-109619","dateAdded":"2026-10-23T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-109619","url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-10-23&host_type=src&vulnerability=cve-2026-109619"},{"source":"vulncheck-kev","sourceId":"CVE-2026-109619","url":"https://unit42.paloaltonetworks.com/cve-2026-109618-cve-2026-109619/"},{"source":"vulncheck-kev","sourceId":"CVE-2026-109619","url":"https://x.com/klrgrz/status/2113780927952236580"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-109619","catalog":"VulnCheck KEV","kind":"report","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-109619&date=2026-10-24","dateAdded":"2026-10-24T00:00:00Z","firstPartyCanary":true,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-109619","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-109619&date=2026-10-24"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-109619","catalog":"VulnCheck KEV","kind":"report","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-109619&date=2026-10-25","dateAdded":"2026-10-25T00:00:00Z","firstPartyCanary":true,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-109619","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-109619&date=2026-10-25"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-109619","catalog":"VulnCheck KEV","kind":"report","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-109619&date=2026-10-26","dateAdded":"2026-10-26T00:00:00Z","firstPartyCanary":true,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-109619","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-109619&date=2026-10-26"}]}]}