CVE-2026-109618

Last refreshed2026-10-23

Status: UPDATED | Advisory ID: CVE-2026-109618

Key Details

CVE	CVE-2026-109618
CVSS Score / Version	9.8 (Critical) / CVSS v3.1
Updated	2026-10-23
CVSS Vector	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`
CVSS Prose	attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products	Siemens RUGGEDCOM APE1808, php php, and PHP Group PHP
Classified as	CWE-416 (Use After Free)

Affected Products, Subsystems & Sectors

Vendor	Product	Affected Versions	Patch Status
Siemens	RUGGEDCOM APE1808
php	php
PHP Group	PHP

Vendor

Product

Affected Versions

Patch Status

Siemens

RUGGEDCOM APE1808

php

PHP Group

PHP

Subsystems	General OT
Sectors	Multiple

What to Know

PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE). (NVD)

What to Do

Monitor Siemens, php, and PHP Group's web pages for any future patch releases. See vendor advisory link below.

References

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-109618
CVE	https://www.cve.org/CVERecord?id=CVE-2026-109618
Vendor advisory	https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w

Source

Reference

NVD

https://nvd.nist.gov/vuln/detail/CVE-2026-109618

CVE

https://www.cve.org/CVERecord?id=CVE-2026-109618

Vendor advisory

https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w