TI-2026-78794 CVE-2026-109619
PHP remote code execution via stale global state
Priority CRITICAL 99KEV
PHP has various global state that temporarily points into request memory.
RHSA-2026:88725
php security update
Released 2026-10-23 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream E4S (v.9.4) php-8.0.30-1.el9_4.2, php-bcmath-8.0.30-1.el9_4.2, php-cli-8.0.30-1.el9_4.2 +22
Fixes 2 records
Priority CRITICAL 99KEV
PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request.