Repository
dinosn/php-cve-2026-10961x-lab-poc
PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12
Stars
97
Today
+27
last 24 hours
This week
+34
Forks
20
Clone
git clone https://github.com/dinosn/php-cve-2026-10961x-lab-poc.gitStar growth
#cve-2026-109618#cve-2026-109619#exploit#memory-corruption#php#php2shell#rce#rfc1867#security-research#session-upload-progress
- Created
- 2026-10-20
- Last commit
- 2026-10-22
- Gained since tracking
- +34
Updated Fri, 23 Oct 2026 04:55:55 GMT · description from the project itself