CVE-2026-109619 — PHP Stale Internal Request-State Vulnerability
The CISA Known Exploited Vulnerabilities Catalog entry describes a PHP stale internal request-state vulnerability. CISA states that the KEV Catalog is the authoritative source for vulnerabilities exploited in the wild.
CERT24