CVE-2026-109618

{
  "etk_id": "ETK-2026-2243",
  "cve_id": "CVE-2026-109618",
  "display_id": "CVE-2026-109618",
  "ghsa_id": null,
  "euvd_id": null,
  "status": "in_pipeline",
  "anchor_state": "awaiting_cve",
  "title": "PHP flaws requiring emergency updates",
  "summary": "PHP deployments may be affected by two vulnerabilities for which emergency patches are being prepared. The available evidence does not disclose the vulnerability classes, affected versions, attacker impact, or conditions required for exploitation.",
  "mitigation": "Identify all deployed PHP versions and prepare to apply the emergency updates when released; verify the installed package and version afterward. Restrict public exposure of PHP-hosting services and isolate systems that cannot be updated promptly.",
  "vendor": "PHP security team",
  "product": "PHP",
  "affected": [],
  "cwes": null,
  "cvss_score": 9,
  "cvss_src": "ethiack_provisional",
  "cvss_vector": null,
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 6.09123545,
  "t0_at": null,
  "signals": {
    "public_poc": {
      "at": "2026-10-21T03:06:03+00:00",
      "days": -0.14994290532407406,
      "is_lower_bound": true,
      "measured_at": "2026-10-21T06:41:58.090250+00:00",
      "url": "https://github.com/Zer061/CVE-2026-109618"
    },
    "trigger_signal": {
      "at": "2026-10-20T20:56:43+00:00",
      "days": -0.40642438680555554,
      "is_lower_bound": true,
      "measured_at": "2026-10-21T06:41:58.090250+00:00",
      "url": "https://www.bleepingcomputer.com/news/security/php-warns-admins-of-two-critical-flaws-emergency-patches-coming-tomorrow/"
    }
  }
}