early signals Full Disclosure infra

CVE-2026-109618: PHP-CGI Pointer Underflow → Remote Code Execution (CVSS 9.2)

// AI summary

PHP versions 5.x through 8.4.26 with cgi.fix_pathinfo=1 are affected by CVE-2026-109618, a pointer underflow enabling unauthenticated remote code execution.

// from the source

Posted by jose on Oct 27 CVE-2026-109618: Pointer underflow in PHP s CGI SAPI enables unauthenticated remote code execution. Affected: ALL PHP versions 5.x through 8.4.26 with cgi.fix_pathinfo=1 (default configuration). Same vulnerability class as CVE-2019-11043 (PHP-FPM, CVSS 9.8, patched 2019) — the CGI SAPI never received the equivalent fix. Fix: PHP 8.5.12, 8.4.27, 8.3.36, 8.2.35 (scheduled Oct 21, 2026 14:00 UTC) PHP 8.1 and earlier (EOL) receive NO fix....
Read at seclists.org ↗ More from Full Disclosure

# more from Full Disclosure

  1. Full Disclosure infra

    [0day-rubbish] NETGEAR RAX120 V1.2.5.18 authenticated SOAP InstallApp OS command injection to root-configured web-stack execution (6.8 Medium; conditionally 7.2 High with management exposure)

    seclists.org
  2. Full Disclosure infra

    [0day-rubbish] Raritan PX3 PDU G4 firmware 4.3.14 command injection in the ping and traceroute diagnostics through an inverted hostname-validation return check (8.8)

    seclists.org
  3. Full Disclosure infra

    [0day-rubbish] NUUO Crystal Server 3.19.0.85 unauthenticated upload.php PHP web-root write with fastcgi execution into server-side code execution as the web service account (9.8 Critical)

    seclists.org
  4. Full Disclosure infra

    [0day-rubbish] Moxa MAR-2000 firmware FWR_MAR2000_V1.0_Build_15010909 scenario ping condition command injection through the auto-executing ping thread (7.2)

    seclists.org
  5. Full Disclosure infra

    [0day-rubbish] Moxa MAR-2000 firmware FWR_MAR2000_V1.0_Build_15010909 IPsec tunnel address command injection through the route-management shell commands (7.2)

    seclists.org