CISA KEV: CVE-2026-109619 — PHP Group PHP actively exploited
CISA KEV · · Critical severity
PHP Stale Internal Request-State Vulnerability. PHP contains a stale internal request-state vulnerability that allows for unauthenticated remote code execution. Required action: Apply mitigations in accordance with vendor instructions,...