ChangeIntel IT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord

Connected evidence

Follow a shared identifier, source page or planning group across source records. Dates show chronology; a connection does not establish cause, a shared rollout or applicability to your environment.

PHP Stale Internal Request-State Vulnerability

Lead record
Why these records are connected
Records explicitly naming the same CVE identifier.
Connection key
cve:CVE-2026-109619
Public snapshot refreshed
today 16:29 UTC
Distinct source events
10
Source records represented
10

Current snapshot membership is shown here. Source histories and cited revisions remain on each record. Future source targets are labelled separately from observed changes. Browse connections.

Evidence in chronological order

  1. Thu 22 Oct · Dated source evidence · Security advisory WAF - WAF Release - 2026-10-22 - Emergency - Cloudflare Managed RulesetCloudflare WAF changelog Source: Cloudflare WAF changelog · source check: today 15:24 UTCYour review: not selected in your watchlist or stack; no review is inferred.Release notes name CVE-2026-109618, CVE-2026-109619
  2. Thu 22 Oct · Dated source evidence · Security advisory WAF - WAF Release - 2026-10-22 - Emergency - Cloudflare Free RulesetCloudflare WAF changelog Source: Cloudflare WAF changelog · source check: today 15:24 UTCYour review: not selected in your watchlist or stack; no review is inferred.Release notes name CVE-2026-109618, CVE-2026-109619
  3. Fri 23 Oct · Dated source evidence · Security advisory WAF - WAF Release - 2026-10-23 - Emergency - Cloudflare Managed RulesetCloudflare WAF changelog Source: Cloudflare WAF changelog · source check: today 15:24 UTCYour review: not selected in your watchlist or stack; no review is inferred.Release notes name CVE-2026-115560, CVE-2026-109618, CVE-2026-109619
  4. Fri 23 Oct · Dated source evidence · Security advisory WAF - WAF Release - 2026-10-23 - Emergency - Cloudflare Free RulesetCloudflare WAF changelog Source: Cloudflare WAF changelog · source check: today 15:24 UTCYour review: not selected in your watchlist or stack; no review is inferred.Release notes name CVE-2026-115560, CVE-2026-109618, CVE-2026-109619
  5. Mon 26 Oct · Dated source evidence · New CISA KEV listing observed PHP Stale Internal Request-State VulnerabilityCVE-2026-109619 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.CISA lists exploitation in the wild; assess the source's affected products.
  6. Mon 26 Oct · Dated source evidence · Security advisory Oracle Security Alert Advisory for CVE-2026-109618 and CVE-2026-109619Oracle Security Alerts Source: Oracle Security Alerts · source check: today 16:29 UTCYour review: not selected in your watchlist or stack; no review is inferred.
  7. Wed 28 Oct · Dated source evidence · Security advisory WAF - WAF Release - 2026-10-28Cloudflare WAF changelog Source: Cloudflare WAF changelog · source check: today 15:24 UTCYour review: not selected in your watchlist or stack; no review is inferred.Release notes name CVE-2026-109618, CVE-2026-109619, CVE-2026-115560
  8. Thu 29 Oct · Dated source evidence · Security advisory CVE-2026-109618 Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products (Severity: CRITICAL)Palo Alto Networks security advisories Source: Palo Alto Networks security advisories · source check: today 16:29 UTCYour review: not selected in your watchlist or stack; no review is inferred.
  9. Fri 30 Oct · Dated source evidence · Security advisory WAF - WAF Release - 2026-10-30Cloudflare WAF changelog Source: Cloudflare WAF changelog · source check: today 15:24 UTCYour review: not selected in your watchlist or stack; no review is inferred.Release notes name CVE-2026-109618, CVE-2026-109619, CVE-2026-115560
  10. Tue 3 Nov · Dated source evidence · Security advisory WAF - WAF Release - 2026-11-03Cloudflare WAF changelog Source: Cloudflare WAF changelog · source check: today 15:24 UTCYour review: not selected in your watchlist or stack; no review is inferred.Release notes name CVE-2026-109618, CVE-2026-109619, CVE-2026-115560
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 12 Nov 16:29 UTC · 265 of 275 readable · 263 fully read · documentation 469/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.