Observation · Exploited Vulnerabilities

CVE-2026-109619 — PHP Stale Internal Request-State Vulnerability

The source recorded 1 CVE for this item, in Global. Everything below is what that source published, with the times this observatory received it — no part of it is inferred.

Reading

Value: 1 CVE
Source severity: none supplied by the source
Region: Global
Coordinates: not geolocated
Data quality: complete as published

Evidence and provenance

Source: CISA KEV
Source record ID: kev:CVE-2026-109619
Observed at: 2026-10-26 12:00 UTC
First ingested here: 2026-11-01 19:30 UTC
Last refreshed from source: 2026-11-01 21:00 UTC

Open the original record at the source ← Back to the Exploited Vulnerabilities signal

Additional fields the source published (4)

vendor: PHP Group
product: PHP
due_date: 2026-10-29
ransomware_use: Unknown