CVE Weekly Report — Week of Oct 19 – October 25, 2026
2026-W43
2
Total CVEs
1
Critical
1
High
0
Actively exploited
🔴 Critical CVEs (1)
| CVE | Product | CVSS | KEV | Description | Published |
|---|---|---|---|---|---|
| CVE-2026-109618 | PHP | 9.8 | — | PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some co… | Oct 21 |
🟠 High CVEs (1)
| CVE | Product | CVSS | KEV | Description | Published |
|---|---|---|---|---|---|
| CVE-2026-109619 | PHP | 8.1 | — | PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be cor… | Oct 21 |