> ## Content Index
> Fetch the complete content index at: https://securexion.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# Securexion Daily Exploit Watch - 22 Oct 2026
- URL: https://securexion.com/securexion-daily-exploit-watch-22-oct-2026/
- Published: 2026-10-22T03:30:00.000Z
- Updated: 2026-10-22T19:22:40.000Z
- Description: Critical PHP memory safety flaws in all supported versions (8.2–8.5) allow unauthenticated remote code execution via out-of-memory and global state corruption. Patch immediately.
- Author: Securexion Team
- Tags: Daily Brief, Archive: October 2026, #brief-2026-10-22

Critical PHP memory safety flaws in all supported versions (8.2–8.5) allow unauthenticated remote code execution via out-of-memory and global state corruption. Patch immediately.

Critical · CVSS 9.8CVE-2026-109618, CVE-2026-109619

### [PHP remote code execution via use-after-free in memory management](https://securexion.com/cve-2026-109618/)

Two critical vulnerabilities in PHP's out-of-memory handling and global state management leave freed request memory accessible to subsequent requests, allowing remote code execution without authentication or user interaction. All supported PHP versions 8.2 through 8.5 are affected.

**What to do:** Update PHP immediately to 8.2.35, 8.3.36, 8.4.27, or 8.5.12 depending on your branch; isolate any older instances pending patching.

[Read the full analysis →](https://securexion.com/cve-2026-109618/)

---

*Securexion is the daily exploit watch by* [*FutureOps InfoTech*](https://futureopstech.com/?ref=securexion.com)*. Need help patching or checking for compromise? Talk to us.*