Techly NewsGet the app

Get the latest tech news

PHP session.upload_progress heap UAF (CVE-2026-109618 / -109619)


Overview Two cached bucket pointers, one freed tree. A heap use-after-free in PHP session.upload_progress reaching zend_call_function.

None

Get the Android app

Or read this on Hacker News

Read more on:

Photo of php vulnerability

php vulnerability

Related news:

News photo

Ransomware attackers quickly weaponize PHP vulnerability with 9.8 severity rating | TellYouThePass group opportunistically infects servers that have yet to update

News photo

Ransomware Attackers Quickly Weaponize PHP Vulnerability With 9.8 Severity Rating

« Hey Elon, Where's My $25,000 EV?
Pillowfort Is Closing »