CVE-2026-109618 | PHP up to 8.2.34/8.3.35/8.4.26/8.5.11 longjmp uninitialized pointer

October 21, 2026 Yanac

A vulnerability labeled as critical has been found in PHP up to 8.2.34/8.3.35/8.4.26/8.5.11. This vulnerability affects the function longjmp. The manipulation results in uninitialized pointer.

This vulnerability is reported as CVE-2026-109618. The attack can be launched remotely. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More