PH
Language
PHP
by PHP · last CVE Oct 21, 2026
On CISA KEVExploited in the wildRansomware-linked
748
CVEs
6
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 133High 129Medium 67Low 4
Watch

Add PHP to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-109619
In wildKEV
8.1
100%
Oct 21
RCE via stale global state
Affected: 8.2.* before 8.2.35; 8.3.* before 8.3.36; 8.4.* before 8.4.27; 8.5.* before 8.5.12
Showing 1
The 500 most important CVEs for this product (exploited first, then by severity)