Re: CVE-2026-109618: PHP-CGI Pointer Underflow → Remote Code Execution (CVSS 9.2)
Full Disclosuremailing list archivesFrom: fulldisclosure <fulldisclosure () evol 2026-10-29 04:12:2 Author: seclists.org(查看原文) 阅读量:8 收藏

fulldisclosure logo

Full Disclosure mailing list archives


From: fulldisclosure <fulldisclosure () evolution-hosting eu>
Date: Tue, 27 Oct 2026 09:49:47 +0100

Am 21.10.26 um 07:23 schrieb jose:
CVE-2026-109618: Pointer underflow in PHP's CGI SAPI enables
unauthenticated remote code execution.

that is the CVE for the OOM RCE vulnerability in fpm and mod_php. Sure you got the right on?


Best regards,
Marius

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: https://seclists.org/fulldisclosure/


Current thread:


文章来源: https://seclists.org/fulldisclosure/2026/Oct/51
如有侵权请联系:admin#unsafe.sh