PHP Group vendor intelligence

PHP Group Known Exploited Vulnerabilities

Track evidence-backed exploitation affecting PHP Group products, including the gap beyond CISA KEV, confidence assessments, sensor observations, and practical response context.

Browse KEV feed
Total KEVs
3
Known exploited vulnerabilities affecting PHP Group products
In CISA KEV
1
Records also listed in the official catalog
Beyond CISA KEV
2
Additional exploited vulnerabilities absent from CISA KEV
Sensor Observed
3
PHP Group KEVs with sensor-observed exploitation activity

The catalog gap matters for PHP Group exposure

Two of the three exploited PHP Group vulnerabilities tracked by Previdian are not in CISA KEV. Teams relying on the official catalog alone would miss two-thirds of this vendor portfolio.

33%
Covered by CISA
67%
Beyond CISA
1
Product families

Attested PHP Group vulnerabilities

3 known exploited vulnerabilities in this exploited-vulnerability portfolio. Search, then narrow it to official CISA coverage or the additional records Previdian tracks beyond the catalog.

How exploitation is verified
CVE / description Product Confidence CISA KEV Added
CVE-2026-109619

RCE via stale global state

 PHP Confirmed Beyond CISA 22 Oct 2026
CVE-2026-109618

RCE via OOM corruption

 PHP Confirmed Beyond CISA 21 Oct 2026
CVE-2024-4577

Argument Injection in PHP-CGI

 PHP Confirmed In CISA 12 Jun 2024

Showing 3 of 3 on this page (3 PHP Group known exploited vulnerabilities).

Recurring weakness patterns

Improperly controlled sequential memory allocation, incorrect initialization, and use after free account for six mapped occurrences across this PHP Group KEV portfolio.

Browse all KEVs →

CWE-1325

Improperly Controlled Sequential Memory Allocation

2

CWE-1419

Incorrect Initialization of Resource

2

CWE-416

Use After Free

2

CWE-755

Improper Handling of Exceptional Conditions

2

CWE-824

Access of Uninitialized Pointer

2

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

1