CVE-2026-1096

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

October 21, 2026

Last Seen

October 21, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical PHP Vulnerabilities CVE-2026-109618 and CVE-2026-109619 Disclosed76.3

On October 20, 2026, two critical vulnerabilities in PHP, tracked as CVE-2026-109618 and CVE-2026-109619, were disclosed, allowing unauthenticated remote code execution (RCE) on affected systems. The vulnerabilities, collectively known as 'PHP2Shell', stem from improper memory handling during HTTP r...