SonicALERT
Search

Sonicwall Signatures

 

Go to All Categories list.


  PHP Zend Memory Manager Remote Code Execution (CVE-2026-109618) 5

Category: WEB-ATTACKS      

An uninitialized memory vulnerability has been reported in PHP Zend Memory Manager. The vulnerability is due to improper exception handling, leaving request memory in an uninitialized state, which is subsequently accessed during cleanup. A remote, unauthenticated attacker could exploit this vulnerability by sending crafted requests designed to trigger out-of-memory conditions on the target server. Successful exploitation could result in remote code execution on the target server.


Relevant Information