جزئیات آسیب‌پذیری
CVE-2026-109619
بهره‌برداری فعال
PHP Group PHPSiemens AMIS TSSiemens Energy EngageSiemens RUGGEDCOM APE1808Siemens Spectrum Power 3Siemens Spectrum Power 4
RCE via stale global state
CVSS 4.0
9.2بحرانی
شرح رسمی (انگلیسی)
PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed. Subsequent requests may read or branch on this stale state before it is fully initialized. Multiple strategies can trigger this condition and produce remote code execution (RCE).
اخبار مرتبط
-
Suspected Chinese attackers built a custom PHP2Shell exploit and rooted 25 servers
The Register · ۵ روز پیش
-
CISA confirms PHP2Shell under attack as researchers clock successful exploits
The Register · ۸ روز پیش
- PHP2Shell: What to know about two critical PHP flaws WeLiveSecurity · ۹ روز پیش
- New Serious PHP Vulnerabilities Released and Patched Schneier on Security · ۱۳ روز پیش
-
Widespread PHP Flaw May Cause Many Site Outages Today
Krebs on Security · ۱۴ روز پیش
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 9.2بحرانی | 4.0 | CVEProject cvelistV5 (CNA) (php) | CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
محصولات آسیب‌پذیر
| فروشنده | محصول | نسخه‌ها | منبع |
|---|---|---|---|
| PHP Group | PHP | 8.2.* ≤ v < 8.2.35 | CVEProject cvelistV5 (CNA) |
| PHP Group | PHP | 8.3.* ≤ v < 8.3.36 | CVEProject cvelistV5 (CNA) |
| PHP Group | PHP | 8.4.* ≤ v < 8.4.27 | CVEProject cvelistV5 (CNA) |
| PHP Group | PHP | 8.5.* ≤ v < 8.5.12 | CVEProject cvelistV5 (CNA) |
| Siemens | AMIS TS | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Energy Engage V2.0SP9 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Energy Engage V3.1SP1 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | RUGGEDCOM APE1808 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Spectrum Power 3 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Spectrum Power 4 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Spectrum Power 4 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Spectrum Power 4 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Spectrum Power 7 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Spectrum Power TG | همه | CVEProject cvelistV5 (CNA) |
| Siemens | blueplanet 360 NX3 M6 WM OD IISX | همه | CVEProject cvelistV5 (CNA) |
| Siemens | blueplanet 360 NX3 M6 WM OD IISX - S | همه | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۱۹- https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp vendor-advisory
- https://www.wiz.io/blog/php2shell-php-rce third-party-advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 government-resource
- https://php2shell.delftintellab.com/ third-party-advisory
- https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ third-party-advisory
- http://www.openwall.com/lists/oss-security/2026/10/21/7
- http://www.openwall.com/lists/oss-security/2026/10/21/16
- http://www.openwall.com/lists/oss-security/2026/10/21/17
- http://www.openwall.com/lists/oss-security/2026/10/21/23
- http://www.openwall.com/lists/oss-security/2026/10/22/2
- http://www.openwall.com/lists/oss-security/2026/10/22/14
- http://www.openwall.com/lists/oss-security/2026/10/22/15
- http://www.openwall.com/lists/oss-security/2026/10/22/16
- http://www.openwall.com/lists/oss-security/2026/10/22/19
- http://www.openwall.com/lists/oss-security/2026/10/22/20
- http://www.openwall.com/lists/oss-security/2026/10/23/4
- https://cert-portal.siemens.com/productcert/html/ssa-566512.html
- https://cert-portal.siemens.com/productcert/html/ssa-566435.html
- https://cert-portal.siemens.com/productcert/html/ssa-166980.html
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.
اطلاعات
- تاریخ انتشار
- ۱۴۰۵/۰۷/۲۹
- آخرین به‌روزرسانی
- ۱۴۰۵/۰۸/۰۸
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- php
فهرست KEV آژانس CISA
- تاریخ افزوده‌شدن
- ۱۴۰۵/۰۸/۰۴
- مهلت رفع
- ۱۴۰۵/۰۸/۰۷
- استفاده در باج‌افزار
- نامشخص
پیش‌بینی بهره‌برداری (EPSS)
۹۹٫۹۹٪
احتمال بهره‌برداری در ۳۰ روز
۹۹٫۹٪
صدک (نسبت به همه‌ی CVEها)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- خیر
- وضعیت بهره‌برداری
- فعال
- اثر فنی
- کامل
ضعف‌ها (CWE)
- CWE-416Use after free
- CWE-755Improper Handling of Exceptional Conditions
- CWE-824Access of uninitialized pointer
- CWE-1325Improperly controlled sequential memory allocation
- CWE-1419Incorrect Initialization of Resource