https://cyberveille.ch/tags/cve-2026-114625/ Recent content in Cve-2026-114625 on CyberVeille Hugo -- 0.146.0 fr-fr Cyberveille CC BY-NC-SA 4.0 Mon, 26 Oct 2026 19:39:30 +0000 https://cyberveille.ch/posts/2026-10-25-cves-weekly/ Mon, 26 Oct 2026 19:39:30 +0000 https://cyberveille.ch/posts/2026-10-25-cves-weekly/ <p>Cette page présente les vulnérabilités <strong>les plus discutées</strong> sur les sources publiques (Fediverse, Bluesky, GitHub, blogs) sur la période analysée.</p> <p>Période analysée : <strong>2026-10-18 → 2026-10-25</strong>.</p> <p>Les données sont collectées via <a href="https://www.vulnerability-lookup.org"><strong>Vulnerability-Lookup (CIRCL)</strong></a> et enrichies automatiquement afin d’aider à la <strong>priorisation de la veille et de la remédiation</strong>.</p> <p>📌 <strong>Légende</strong> :</p> <ul> <li><strong>CVSS</strong> : score officiel de sévérité technique.</li> <li><strong>EPSS</strong> : probabilité d’exploitation observée.</li> <li><strong>VLAI</strong> : estimation de sévérité basée sur une analyse IA du contenu de la vulnérabilité.</li> <li><strong>CISA KEV</strong> : vulnérabilité activement exploitée selon la CISA.</li> <li><strong>seen / exploited</strong> : signaux observés dans les sources publiques.</li> </ul> <style> .badge-wrap { margin:.25rem 0 .5rem 0 } .card { border:1px solid #e8eef5; border-radius:12px; padding:1rem 1.2rem; margin:1rem 0; box-shadow:0 1px 0 rgba(0,0,0,.03); background:#fff; } .card h2 { margin:.1rem 0 .35rem 0; font-size:1.25rem } .small { color:#6c757d; font-size:.95rem } .toot { margin:.5rem 0 .75rem 0 } .kv { display:grid; grid-template-columns: 10ch 1fr; gap:.25rem .75rem; margin:.5rem 0 } .kv div:nth-child(odd){ color:#6c757d } details > summary { cursor:pointer; margin:.25rem 0; font-weight:600 } .toot pre { max-height: 320px; overflow:auto; } /* petit confort pour markdown dans les fiches */ .frdesc p { margin:.25rem 0; } .frdesc ul, .frdesc ol { margin:.4rem 0 .4rem 1.1rem; } .frdesc li { margin:.15rem 0; } .frdesc code { padding:.1rem .25rem; border-radius:6px; } /* Dark mode soigné */ :root { color-scheme: light dark; } @media (prefers-color-scheme: dark) { body { background:#0b1220; color:#e6edf3; } .card { background:#0e1625; border-color:#263244; box-shadow:none; } .card h2 a { color:#c9d1d9; } .small { color:#aab6c3; } .kv div:nth-child(odd){ color:#9aa7b5 } a { color:#7ab7ff; } .toot pre { background:#0b1220; border:1px solid #263244; } } </style> <div class="card" id="CVE-2026-109618"> <h2><a href="https://vulnerability.circl.lu/vuln/CVE-2026-109618">CVE-2026-109618</a></h2> <div class="badge-wrap"><span style="display:inline-block;margin:0 .25rem .4rem 0;padding:.2rem .55rem;border-radius:.55rem;font-size:.85rem;line-height:1;color:white;background:#6c757d;"><strong>CVSS:</strong> N/A</span> <span style="display:inline-block;margin:0 .25rem .4rem 0;padding:.2rem .55rem;border-radius:.55rem;font-size:.85rem;line-height:1;color:white;background:#2563eb;"><strong>EPSS:</strong> 99.98%</span> <span style="display:inline-block;margin:0 .25rem .4rem 0;padding:.2rem .55rem;border-radius:.55rem;font-size:.85rem;line-height:1;color:white;background:#6c757d;"><strong>VLAI:</strong> N/A</span></div> <div class="kv"> <div>Produit</div><div>PHP Group — PHP</div> <div>Publié</div><div>2026-10-21T13:48:34.845Z</div> </div> <p>PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).</p>