A
aconite33@infosec.exchange
@aconite33@infosec.exchange
Indlæg
-
Somebody has leaked CVE-2026-109618 and CVE-2026-109619 in PHP before the patch is out. -
Somebody has leaked CVE-2026-109618 and CVE-2026-109619 in PHP before the patch is out.@GossiTheDog Messing with getting a PoC. This doesn't seem to be a trivial exploit. ASLR has to be defeated through leak addresses, size of the memory has to be large enough, specific glibc has to be considered. While the entire platform of PHP is vulnerable, I don't think this is going to be a simple exploit to land.
-
Somebody has leaked CVE-2026-109618 and CVE-2026-109619 in PHP before the patch is out.@GossiTheDog I sent claude after it just using the source code and the picture posted. Got a PoC working by the time I dropped the kid off at school.