CVE-2026-107891

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

October 23, 2026

Last Seen

October 23, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical PHP Vulnerabilities Exploited Before Public Disclosure72.8

Two critical vulnerabilities in PHP, tracked as CVE-2026-109618 and CVE-2026-109619, were exploited before their public disclosure on October 21, 2026. Amazon Threat Intelligence reported that attempts to exploit these vulnerabilities began on October 17, 2026, targeting its MadPot honeypot network....