CVE-2026-109618 — PHP Memory Corruption Vulnerability

The CISA Known Exploited Vulnerabilities Catalog lists CVE-2026-109618 as a PHP memory corruption vulnerability. CISA describes the KEV Catalog as the authoritative source for vulnerabilities exploited in the wild.