CVE-2026-109619 | PHP up to 8.2.34/8.3.35/8.4.26/8.5.11 race condition

October 21, 2026 Yanac

A vulnerability described as critical has been identified in PHP up to 8.2.34/8.3.35/8.4.26/8.5.11. Impacted is an unknown function. Such manipulation leads to race condition.

This vulnerability is traded as CVE-2026-109619. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More