CVE-2026-109618Published
RCE via OOM corruption
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-109618 · Microsoft / collected KEV context
cve-program · CVE-2026-109618
Related operational evidence
Explicit CVE identifiers- CVE-2026-109618 Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products (Severity: HIGH) · Security news · 26 Oct 2026
- Oracle Security Alert CVE-2026-109618 · Security advisory · 25 Oct 2026
- WAF - WAF Release - 2026-10-22 - Emergency - Cloudflare Managed Ruleset · Security advisory · 22 Oct 2026
- WAF - WAF Release - 2026-10-22 - Emergency - Cloudflare Free Ruleset · Security advisory · 22 Oct 2026
- PHP core RCE vulnerability patches (CVE-2026-109618 and CVE-2026-109619) · Security advisory · 21 Oct 2026