{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-109618", "assignerOrgId": "dd77f84a-d19a-4638-8c3d-a322d820ed2b", "state": "PUBLISHED", "assignerShortName": "php", "dateReserved": "2026-10-12T21:03:58.117Z", "datePublished": "2026-10-21T13:48:34.845Z", "dateUpdated": "2026-10-23T14:07:55.926Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "dd77f84a-d19a-4638-8c3d-a322d820ed2b", "shortName": "php", "dateUpdated": "2026-10-21T13:48:34.845Z"}, "title": "RCE via OOM corruption", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-416", "description": "CWE-416 Use after free", "type": "CWE"}]}, {"descriptions": [{"lang": "en", "cweId": "CWE-755", "description": "CWE-755 Improper Handling of Exceptional Conditions", "type": "CWE"}]}, {"descriptions": [{"lang": "en", "cweId": "CWE-824", "description": "CWE-824 Access of uninitialized pointer", "type": "CWE"}]}, {"descriptions": [{"lang": "en", "cweId": "CWE-1325", "description": "CWE-1325 Improperly controlled sequential memory allocation", "type": "CWE"}]}, {"descriptions": [{"lang": "en", "cweId": "CWE-1419", "description": "CWE-1419 Incorrect Initialization of Resource", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-234", "descriptions": [{"lang": "en", "value": "CAPEC-234 Hijacking a privileged process"}]}], "affected": [{"vendor": "PHP Group", "product": "PHP", "packageName": "php-src", "versions": [{"status": "affected", "version": "8.2.*", "lessThan": "8.2.35", "versionType": "semver"}, {"status": "affected", "version": "8.3.*", "lessThan": "8.3.36", "versionType": "semver"}, {"status": "affected", "version": "8.4.*", "lessThan": "8.4.27", "versionType": "semver"}, {"status": "affected", "version": "8.5.*", "lessThan": "8.5.12", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).", "supportingMedia": [{"type": "text/html", "base64": false, "value": "PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).<br>"}]}], "references": [{"url": "https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w", "tags": ["vendor-advisory"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"attackVector": "NETWORK", "attackComplexity": "HIGH", "attackRequirements": "PRESENT", "privilegesRequired": "NONE", "userInteraction": "NONE", "vulnConfidentialityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subIntegrityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subAvailabilityImpact": "NONE", "exploitMaturity": "NOT_DEFINED", "Safety": "NOT_DEFINED", "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "version": "4.0", "baseSeverity": "CRITICAL", "baseScore": 9.2, "vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"}}], "workarounds": [{"lang": "en", "value": "Check the GitHub Security Advisory for mitigation strategies.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Check the GitHub Security Advisory for mitigation strategies."}]}], "credits": [{"lang": "en", "value": "Ryan at Calif.io", "type": "reporter"}, {"lang": "en", "value": "Wiz", "type": "reporter"}, {"lang": "en", "value": "OpenAI", "type": "finder"}, {"lang": "en", "value": "Arnaud Le Blanc", "type": "remediation developer"}, {"lang": "en", "value": "Ilija Tovilo", "type": "remediation developer"}, {"lang": "en", "value": "Jakub Zelenka", "type": "remediation developer"}, {"lang": "en", "value": "Nora Dossche", "type": "remediation developer"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.5"}}, "adp": [{"references": [{"url": "https://www.wiz.io/blog/php2shell-php-rce", "tags": ["third-party-advisory"]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-10-21T00:00:00+00:00", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3", "id": "CVE-2026-109618"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-22T23:04:19.783Z"}}, {"title": "CVE Program Container", "references": [{"url": "http://www.openwall.com/lists/oss-security/2026/10/21/6"}, {"url": "http://www.openwall.com/lists/oss-security/2026/10/23/5"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2026-10-23T14:07:55.926Z"}}, {"x_adpType": "supplier", "providerMetadata": {"orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e", "shortName": "siemens-SADP", "dateUpdated": "2026-10-23T13:15:14.291Z"}, "affected": [{"vendor": "Siemens", "product": "RUGGEDCOM APE1808", "versions": [{"status": "affected", "version": "0", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "unknown"}], "references": [{"url": "https://cert-portal.siemens.com/productcert/html/ssa-566512.html"}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "http://www.openwall.com/lists/oss-security/2026/10/21/6"}, {"url": "http://www.openwall.com/lists/oss-security/2026/10/23/5"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2026-10-23T14:07:55.926Z"}}, {"affected": [{"vendor": "Siemens", "product": "RUGGEDCOM APE1808", "versions": [{"status": "affected", "version": "0", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "unknown"}], "x_adpType": "supplier", "references": [{"url": "https://cert-portal.siemens.com/productcert/html/ssa-566512.html"}], "providerMetadata": {"orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e", "shortName": "siemens-SADP", "dateUpdated": "2026-10-23T13:15:14.291Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-109618", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-10-21T14:34:39.479770Z"}}}], "references": [{"url": "https://www.wiz.io/blog/php2shell-php-rce", "tags": ["third-party-advisory"]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-21T14:36:08.475Z"}}], "cna": {"title": "RCE via OOM corruption", "source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "reporter", "value": "Ryan at Calif.io"}, {"lang": "en", "type": "reporter", "value": "Wiz"}, {"lang": "en", "type": "finder", "value": "OpenAI"}, {"lang": "en", "type": "remediation developer", "value": "Arnaud Le Blanc"}, {"lang": "en", "type": "remediation developer", "value": "Ilija Tovilo"}, {"lang": "en", "type": "remediation developer", "value": "Jakub Zelenka"}, {"lang": "en", "type": "remediation developer", "value": "Nora Dossche"}], "impacts": [{"capecId": "CAPEC-234", "descriptions": [{"lang": "en", "value": "CAPEC-234 Hijacking a privileged process"}]}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 9.2, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "HIGH", "attackRequirements": "PRESENT", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "PHP Group", "product": "PHP", "versions": [{"status": "affected", "version": "8.2.*", "lessThan": "8.2.35", "versionType": "semver"}, {"status": "affected", "version": "8.3.*", "lessThan": "8.3.36", "versionType": "semver"}, {"status": "affected", "version": "8.4.*", "lessThan": "8.4.27", "versionType": "semver"}, {"status": "affected", "version": "8.5.*", "lessThan": "8.5.12", "versionType": "semver"}], "packageName": "php-src", "defaultStatus": "unaffected"}], "references": [{"url": "https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w", "tags": ["vendor-advisory"]}], "workarounds": [{"lang": "en", "value": "Check the GitHub Security Advisory for mitigation strategies.", "supportingMedia": [{"type": "text/html", "value": "Check the GitHub Security Advisory for mitigation strategies.", "base64": false}]}], "x_generator": {"engine": "Vulnogram 1.0.5"}, "descriptions": [{"lang": "en", "value": "PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).", "supportingMedia": [{"type": "text/html", "value": "PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).<br>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-416", "description": "CWE-416 Use after free"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-755", "description": "CWE-755 Improper Handling of Exceptional Conditions"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-824", "description": "CWE-824 Access of uninitialized pointer"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-1325", "description": "CWE-1325 Improperly controlled sequential memory allocation"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-1419", "description": "CWE-1419 Incorrect Initialization of Resource"}]}], "providerMetadata": {"orgId": "dd77f84a-d19a-4638-8c3d-a322d820ed2b", "shortName": "php", "dateUpdated": "2026-10-21T13:48:34.845Z"}}}, "cveMetadata": {"cveId": "CVE-2026-109618", "state": "PUBLISHED", "dateUpdated": "2026-10-23T14:07:55.926Z", "dateReserved": "2026-10-12T21:03:58.117Z", "assignerOrgId": "dd77f84a-d19a-4638-8c3d-a322d820ed2b", "datePublished": "2026-10-21T13:48:34.845Z", "assignerShortName": "php"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "packageName": "php-src", "product": "PHP", "vendor": "PHP Group", "versions": [{"lessThan": "8.2.35", "status": "affected", "version": "8.2.*", "versionType": "semver"}, {"lessThan": "8.3.36", "status": "affected", "version": "8.3.*", "versionType": "semver"}, {"lessThan": "8.4.27", "status": "affected", "version": "8.4.*", "versionType": "semver"}, {"lessThan": "8.5.12", "status": "affected", "version": "8.5.*", "versionType": "semver"}]}], "source": "security@php.net"}, {"affectedData": [{"defaultStatus": "unknown", "product": "RUGGEDCOM APE1808", "vendor": "Siemens", "versions": [{"lessThan": "*", "status": "affected", "version": "0", "versionType": "custom"}]}], "source": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*", "matchCriteriaId": "6F6AF526-A467-44E0-9865-81DC17D9D921", "versionEndExcluding": "8.2.35", "versionStartIncluding": "7.3.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*", "matchCriteriaId": "40BD58D9-94BD-41B6-9DDA-30CA729409FB", "versionEndExcluding": "8.3.36", "versionStartIncluding": "8.3.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*", "matchCriteriaId": "D057202A-94FF-4118-A41F-BA8ABB76346E", "versionEndExcluding": "8.4.27", "versionStartIncluding": "8.4.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*", "matchCriteriaId": "CAF7FA75-7F87-405F-A222-C5C17D42C31F", "versionEndExcluding": "8.5.12", "versionStartIncluding": "8.5.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:siemens:ruggedcom_ape1808_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "37FDCA69-9049-40B4-88AF-F476901022B6", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:siemens:ruggedcom_ape1808:-:*:*:*:*:*:*:*", "matchCriteriaId": "B89A6863-B602-4404-8D26-337FECABFFF0", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*", "matchCriteriaId": "243077CD-5021-4DF3-8AC7-5B14F7FD9710", "versionEndExcluding": "10.2.7", "versionStartIncluding": "10.2.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:-:*:*:*:*:*:*", "matchCriteriaId": "A8C42D98-CF8F-456B-9D57-80BBDC2C8E74", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h1:*:*:*:*:*:*", "matchCriteriaId": "B3AAD4BA-22DD-43D3-91F1-8A6F5FBBF029", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h10:*:*:*:*:*:*", "matchCriteriaId": "EFB63AFC-C3EC-4D1A-BC4A-810662AD16BD", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h11:*:*:*:*:*:*", "matchCriteriaId": "E67DEF1D-8674-41E8-AA07-0499DCCFD67A", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h12:*:*:*:*:*:*", "matchCriteriaId": "AA4994CB-6591-4B44-A5D7-3CDF540B97DE", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h13:*:*:*:*:*:*", "matchCriteriaId": "71EB32DA-D82F-49DD-B06F-7F10F08F740E", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h14:*:*:*:*:*:*", "matchCriteriaId": "BF05E61D-0EC2-4755-8FCF-12E102A4D8FC", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h15:*:*:*:*:*:*", "matchCriteriaId": "22ED8EDB-5549-4D29-90D2-FFE33D030912", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h16:*:*:*:*:*:*", "matchCriteriaId": "A6AB7874-FE24-42AC-8E3A-822A70722126", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h17:*:*:*:*:*:*", "matchCriteriaId": "61B69220-4155-4462-A133-CE7A54747B83", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h18:*:*:*:*:*:*", "matchCriteriaId": "34B083B9-CC1B-43CD-9A16-C018F7FA2DDB", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h19:*:*:*:*:*:*", "matchCriteriaId": "0D88CC33-7E32-4E82-8A94-70759E910510", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h2:*:*:*:*:*:*", "matchCriteriaId": "FA109AEA-0015-4EAA-BD86-F070FEEA2DF7", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h20:*:*:*:*:*:*", "matchCriteriaId": "F90EF82F-1CC6-44B4-AFF9-02DF4EE84F81", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h21:*:*:*:*:*:*", "matchCriteriaId": "FA91A4E9-CE1E-4CB8-B717-4B0E314C0171", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h22:*:*:*:*:*:*", "matchCriteriaId": "6B4D43CC-1B4E-4380-B4A2-487870EFC5B4", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h23:*:*:*:*:*:*", "matchCriteriaId": "DF7382E1-0678-40BC-8964-9D00F6C4C6F3", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h24:*:*:*:*:*:*", "matchCriteriaId": "28994519-3519-4E94-8D8B-7C4251A82B8B", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h3:*:*:*:*:*:*", "matchCriteriaId": "776E06EC-2FDA-4664-AB43-9F6BE9B897CA", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h32:*:*:*:*:*:*", "matchCriteriaId": "53981EA8-847F-4FBC-BA55-8EDF591E0FF8", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h34:*:*:*:*:*:*", "matchCriteriaId": "8585BA8F-2AA0-4413-81A1-927FE523598C", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h35:*:*:*:*:*:*", "matchCriteriaId": "B12B5B2A-0F57-4D81-B6CE-050D1F183B74", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h36:*:*:*:*:*:*", "matchCriteriaId": "E48FAB14-2A95-4D13-B5AB-4B96DED669E1", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h37:*:*:*:*:*:*", "matchCriteriaId": "F2600827-724D-4B74-8075-74F96C989C2C", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h38:*:*:*:*:*:*", "matchCriteriaId": "D05EFEF1-3092-41DB-B5BB-F1CDE3E1F982", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h4:*:*:*:*:*:*", "matchCriteriaId": "20A2E1F0-8303-483F-9199-9FE257B8A228", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h5:*:*:*:*:*:*", "matchCriteriaId": "3AF4AB7F-F9B0-4DC4-BFC5-8FC60CE65A9B", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h6:*:*:*:*:*:*", "matchCriteriaId": "CBE09375-A863-42FF-813F-C20679D7C45C", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h7:*:*:*:*:*:*", "matchCriteriaId": "0247BDD2-714F-4FFD-9433-FEC7747B30D1", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h8:*:*:*:*:*:*", "matchCriteriaId": "1311961A-0EF6-488E-B0C2-EDBD508587C9", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h9:*:*:*:*:*:*", "matchCriteriaId": "C779DF2B-D72A-4327-8AD8-3EA6751741F1", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.8:*:*:*:*:*:*:*", "matchCriteriaId": "78EAA309-2755-4ED2-9AFC-F4D9DF8F90D3", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.9:*:*:*:*:*:*:*", "matchCriteriaId": "5D6D42C2-1CEC-47D2-82B2-1EFE71A8C8A3", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:-:*:*:*:*:*:*", "matchCriteriaId": "03C5ABF2-8C53-4376-8A64-6CB34E18E77C", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h1:*:*:*:*:*:*", "matchCriteriaId": "64F22CCE-6EAF-403B-B522-C11085410C65", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h10:*:*:*:*:*:*", "matchCriteriaId": "FF7FCD8B-80DF-4004-A9D2-4EE884F089A6", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h11:*:*:*:*:*:*", "matchCriteriaId": "15F5A583-A213-475E-8305-B8087DADCABF", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h12:*:*:*:*:*:*", "matchCriteriaId": "83C9637A-B615-4CC2-84AA-BDCFE611484C", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h13:*:*:*:*:*:*", "matchCriteriaId": "7EB3881C-B255-41AD-B61F-C14743824A3E", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h14:*:*:*:*:*:*", "matchCriteriaId": "224270A7-767D-433B-AD51-C031506747C1", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h17:*:*:*:*:*:*", "matchCriteriaId": "A532EFC6-A883-4279-8C05-9CD600B3F963", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h18:*:*:*:*:*:*", "matchCriteriaId": "F4F20C02-DF90-4609-9254-B765481C83E0", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h2:*:*:*:*:*:*", "matchCriteriaId": "872BC747-512A-4872-AC86-E7F1DC589F47", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h21:*:*:*:*:*:*", "matchCriteriaId": "E5E36C87-E01D-49DC-AB73-10E5EE27F596", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h27:*:*:*:*:*:*", "matchCriteriaId": "39437442-B24D-492F-B637-2203492327FC", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h3:*:*:*:*:*:*", "matchCriteriaId": "67F527D0-F85B-4B83-AEA5-BA636FC89210", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h30:*:*:*:*:*:*", "matchCriteriaId": "984BE1FB-ADB7-4831-AEDD-39DBAED078B0", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h31:*:*:*:*:*:*", "matchCriteriaId": "AF2C954D-9763-41E3-A132-F83C82E79BC0", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h36:*:*:*:*:*:*", "matchCriteriaId": "A963ECCF-0B20-4395-A8B0-BFFCD62598C4", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h37:*:*:*:*:*:*", "matchCriteriaId": "F9242B47-DB67-4156-8165-A2198289EAAF", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h39:*:*:*:*:*:*", "matchCriteriaId": "1B69A207-0320-4880-94B8-D69E5883209A", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h4:*:*:*:*:*:*", "matchCriteriaId": "6CF8F985-7E51-49E6-857A-FAAF027F5611", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h40:*:*:*:*:*:*", "matchCriteriaId": "B3DC179C-4ABC-4052-AEE0-464E429FF507", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h41:*:*:*:*:*:*", "matchCriteriaId": "AFC9BDF5-5A3F-49CA-B296-F2468F705D07", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h5:*:*:*:*:*:*", "matchCriteriaId": "B437DCEA-ABA3-41CA-B320-97EC430F1122", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h6:*:*:*:*:*:*", "matchCriteriaId": "223673C1-9327-4C12-BF02-7447D2CAD16C", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h7:*:*:*:*:*:*", "matchCriteriaId": "593AFE7A-CB37-4156-A2B8-646A317F3176", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h8:*:*:*:*:*:*", "matchCriteriaId": "63F4EE10-4A97-4668-9050-2DB4CEBFB307", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h9:*:*:*:*:*:*", "matchCriteriaId": "A9F032C2-3202-479B-8C70-277F6871A4A4", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.11:*:*:*:*:*:*:*", "matchCriteriaId": "3079F29C-688B-4FFB-BBC0-5FCD7B5B6905", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.12:*:*:*:*:*:*:*", "matchCriteriaId": "674C85C5-162E-42DE-ACD1-D18943040E1C", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:-:*:*:*:*:*:*", "matchCriteriaId": "C2B871A6-0636-42A0-9573-6F693D7753AD", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h1:*:*:*:*:*:*", "matchCriteriaId": "F1FC63B8-B8D9-4EC1-85CA-2E12B38ACD3E", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h10:*:*:*:*:*:*", "matchCriteriaId": "F3F8462A-71C0-4F81-9882-C73BC90697CA", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h15:*:*:*:*:*:*", "matchCriteriaId": "85653992-4FBF-445C-881B-5F2494B597BE", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h16:*:*:*:*:*:*", "matchCriteriaId": "C1B72E68-2D01-483F-BEC5-59C49E96B976", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h18:*:*:*:*:*:*", "matchCriteriaId": "E49419C4-9AFE-4B7F-90EF-DB50EBB608D3", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h2:*:*:*:*:*:*", "matchCriteriaId": "60CE628F-C4CB-4342-8D71-DE61A089B612", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h21:*:*:*:*:*:*", "matchCriteriaId": "7050FB97-DAA8-4A15-A253-23AADE921960", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h22:*:*:*:*:*:*", "matchCriteriaId": "5EA595B2-C46B-4953-A306-2DB89E315286", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h23:*:*:*:*:*:*", "matchCriteriaId": "3E012C00-221B-4C5D-8856-072A4906E967", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h24:*:*:*:*:*:*", "matchCriteriaId": "8B310223-16DF-4C61-910A-EE04C9A70D50", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h26:*:*:*:*:*:*", "matchCriteriaId": "E5450EBA-D79B-4A83-B55C-25915762F5F1", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h3:*:*:*:*:*:*", "matchCriteriaId": "2447D2B1-A145-4036-B9F2-17648B193465", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h4:*:*:*:*:*:*", "matchCriteriaId": "C24353AF-DC81-49B9-9132-9EEC8E6009BB", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h5:*:*:*:*:*:*", "matchCriteriaId": "B4420489-AE0F-4A48-B2CE-C165BEBFA6A2", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:h7:*:*:*:*:*:*", "matchCriteriaId": "C45D8DF1-9483-4B24-AB94-B1FF4A5F2606", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.14:*:*:*:*:*:*:*", "matchCriteriaId": "941CB947-862C-4C17-A039-8CD46D21B3BA", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.15:-:*:*:*:*:*:*", "matchCriteriaId": "A933CED0-5EC6-4E9B-8F5F-969BFFE2A72F", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:-:*:*:*:*:*:*", "matchCriteriaId": "BC38A9CD-CDB6-423A-BE8D-2E0E45A3B239", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h1:*:*:*:*:*:*", "matchCriteriaId": "41B48ECA-FD05-4EA2-B1C9-771624EAAFF4", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h10:*:*:*:*:*:*", "matchCriteriaId": "FC801C8A-7D73-4A98-91B7-9AA9AAB475F2", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h11:*:*:*:*:*:*", "matchCriteriaId": "EAC7201D-F9D5-4DDB-AA35-876CF07DA6EA", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h4:*:*:*:*:*:*", "matchCriteriaId": "4D65D1F0-323E-41AF-962E-1F9741748A76", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h6:*:*:*:*:*:*", "matchCriteriaId": "D5D41E00-D517-4B81-A7FC-C8E101884807", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h7:*:*:*:*:*:*", "matchCriteriaId": "4607BEE9-193E-43A7-944C-031E956DAB85", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h8:*:*:*:*:*:*", "matchCriteriaId": "8DD4A357-D281-49E0-A85E-034947561F67", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.16:h9:*:*:*:*:*:*", "matchCriteriaId": "22C07297-0F52-4471-ADD1-5530936D4819", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.17:-:*:*:*:*:*:*", "matchCriteriaId": "DEBB519E-9AC8-4100-B71C-E7D3276ED79C", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.18:-:*:*:*:*:*:*", "matchCriteriaId": "19604659-570D-4766-B8B5-8B9920E2607F", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.18:h1:*:*:*:*:*:*", "matchCriteriaId": "745A3A2A-73CF-4DC2-968B-ACFC66389E11", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.18:h10:*:*:*:*:*:*", "matchCriteriaId": "6E1AB9C4-CC5B-4CF7-B906-F848AFBA7228", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.18:h12:*:*:*:*:*:*", "matchCriteriaId": "E2CC7514-5B4B-463A-8ABB-B9B4FAFBFF3F", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.18:h5:*:*:*:*:*:*", "matchCriteriaId": "3A1E533E-DE4A-4F2F-A71A-FFF56E757087", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.18:h6:*:*:*:*:*:*", "matchCriteriaId": "BED53F8F-F46B-4522-91C1-A9CABD6B0A76", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.18:h7:*:*:*:*:*:*", "matchCriteriaId": "CA746F4C-616D-43CC-AF74-C9895149557C", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.18:h8:*:*:*:*:*:*", "matchCriteriaId": "5CF82908-6FA2-4294-92C5-B2532C5C8CBE", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.18:h9:*:*:*:*:*:*", "matchCriteriaId": "3425DECC-B9B5-484B-9109-B31ABC2D9EE6", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*", "matchCriteriaId": "459485B4-47FF-4A5F-9249-AE0445A0096A", "versionEndExcluding": "11.1.4", "versionStartIncluding": "11.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:-:*:*:*:*:*:*", "matchCriteriaId": "DF83EAA1-49E1-4AD0-A049-F1B3065950BC", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h1:*:*:*:*:*:*", "matchCriteriaId": "BE3F7369-9F35-409A-9F47-45A959592DFA", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h10:*:*:*:*:*:*", "matchCriteriaId": "6650937C-D778-4B5D-AA28-E7DA96DDAB7E", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h11:*:*:*:*:*:*", "matchCriteriaId": "DB835E23-6984-413D-A870-8734E626D219", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h12:*:*:*:*:*:*", "matchCriteriaId": "FD247097-EEC7-48E7-9C14-3314900BD5F0", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h13:*:*:*:*:*:*", "matchCriteriaId": "FD701663-4C57-4115-BD59-9DFFB504E2AF", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h15:*:*:*:*:*:*", "matchCriteriaId": "82816C09-6A9D-4AB2-AA55-62CC714CCA82", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h16:*:*:*:*:*:*", "matchCriteriaId": "9AA9F77D-BC9C-4A2C-8988-6DEE65CD9C8E", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h17:*:*:*:*:*:*", "matchCriteriaId": "A5A3CEBF-9F8A-47F9-A302-7C395F2A8146", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h18:*:*:*:*:*:*", "matchCriteriaId": "A79B51D2-74E8-4BA3-AE33-829A9C1776E9", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h2:*:*:*:*:*:*", "matchCriteriaId": "83A04AA3-4B6C-4B75-9797-74FA230FD299", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h25:*:*:*:*:*:*", "matchCriteriaId": "E08297B1-95E9-4730-B59D-252B958C4199", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h27:*:*:*:*:*:*", "matchCriteriaId": "B56B153E-8693-4257-9E33-38904A949ED8", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h3:*:*:*:*:*:*", "matchCriteriaId": "AECB34F6-76F3-46E4-8F08-8570247AC281", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h32:*:*:*:*:*:*", "matchCriteriaId": "A220ED95-5E1A-45AA-85BD-8A58CFC6C697", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h33:*:*:*:*:*:*", "matchCriteriaId": "70C9CB1D-2512-48E7-B8B2-6F6A4A23E0A3", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h34:*:*:*:*:*:*", "matchCriteriaId": "003AE721-D537-442E-8F34-291877B792F6", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h35:*:*:*:*:*:*", "matchCriteriaId": "62C1C70D-2A67-4EEA-AEC4-774B5EBE7F41", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h36:*:*:*:*:*:*", "matchCriteriaId": "70ACE110-0B78-4F64-8B18-E6BA26EE0D3C", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h37:*:*:*:*:*:*", "matchCriteriaId": "A62D7FF9-7E09-43B1-86E8-7EB754C176C8", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h4:*:*:*:*:*:*", "matchCriteriaId": "E9DB4DA9-2262-4E9E-B3A1-49D261D01295", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h5:*:*:*:*:*:*", "matchCriteriaId": "552C1E17-E4A7-462C-97E4-AF14C00B89FC", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h6:*:*:*:*:*:*", "matchCriteriaId": "1EB942A4-026C-494D-A1DD-96259354CB0D", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h7:*:*:*:*:*:*", "matchCriteriaId": "4852E738-990C-4DD2-8252-D4625D843A99", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h8:*:*:*:*:*:*", "matchCriteriaId": "010E5816-BB0D-438B-A280-AF35B435DCFA", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.4:h9:*:*:*:*:*:*", "matchCriteriaId": "CB2C59F8-2583-4510-90F8-500F8329AFFD", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.5:*:*:*:*:*:*:*", "matchCriteriaId": "7C31ACD7-46AB-4092-89F3-7B4C9B642199", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:-:*:*:*:*:*:*", "matchCriteriaId": "52C50A07-F4D8-4F1F-BA61-3429BB1721BE", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h1:*:*:*:*:*:*", "matchCriteriaId": "9D12FF27-C186-467C-8627-1284EBC67243", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h10:*:*:*:*:*:*", "matchCriteriaId": "AF4AA997-35BC-4BC1-9EF2-644503B2D806", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h14:*:*:*:*:*:*", "matchCriteriaId": "12EF4DDF-9773-4B02-8FF4-F94A1D49E6AA", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h17:*:*:*:*:*:*", "matchCriteriaId": "8FAE17BB-7938-41D0-8D62-46F829C647BC", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h18:*:*:*:*:*:*", "matchCriteriaId": "2682D64E-79A4-4522-8742-7EF1637764AD", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h19:*:*:*:*:*:*", "matchCriteriaId": "6DA5A0AD-C4FB-4210-8651-F94F2875A0EA", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h2:*:*:*:*:*:*", "matchCriteriaId": "45D633D7-A4B5-4D68-9BAB-D9BA25877F36", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h20:*:*:*:*:*:*", "matchCriteriaId": "B79DB477-A907-4300-A651-16F93880B049", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h21:*:*:*:*:*:*", "matchCriteriaId": "AF74D8FA-677F-484D-9338-A1761614FFD6", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h22:*:*:*:*:*:*", "matchCriteriaId": "F9FC5118-4056-4E22-A1F0-D6FFA2B88472", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h23:*:*:*:*:*:*", "matchCriteriaId": "5E7A808F-F52F-4786-950C-591CCADB2EE4", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h25:*:*:*:*:*:*", "matchCriteriaId": "0CA82012-AA59-44C1-BB9D-0B28764D507E", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h29:*:*:*:*:*:*", "matchCriteriaId": "27233F80-A620-42D3-927D-4FCDE6345456", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h3:*:*:*:*:*:*", "matchCriteriaId": "63729FA6-ED2A-4593-9436-232F282A0A78", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h32:*:*:*:*:*:*", "matchCriteriaId": "33BF6023-0112-49BB-B378-6F4022B6A028", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h33:*:*:*:*:*:*", "matchCriteriaId": "00F43B36-8EB6-4703-8C1E-A836B06767FD", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h34:*:*:*:*:*:*", "matchCriteriaId": "6F6C4DE2-32FC-42C4-87E6-FCAD39322740", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h35:*:*:*:*:*:*", "matchCriteriaId": "D6395F61-F268-4183-A4ED-1D355827B3EF", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h36:*:*:*:*:*:*", "matchCriteriaId": "3A5C32B3-6715-46BD-833C-C6EB5A15B99B", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h38:*:*:*:*:*:*", "matchCriteriaId": "28BB63E1-EE93-4158-B7FA-E3549CD2B620", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h39:*:*:*:*:*:*", "matchCriteriaId": "E97EAC7C-943B-4D27-91E5-09BBD07FE3DB", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h4:*:*:*:*:*:*", "matchCriteriaId": "F39792EF-61B5-4874-9FD0-7544F8C5C0D4", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h5:*:*:*:*:*:*", "matchCriteriaId": "CCC24BCD-E508-4553-9BAC-468A1078C9A2", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h6:*:*:*:*:*:*", "matchCriteriaId": "4A06B6F4-DCAE-4115-93D4-25D0A37AAB9F", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.6:h7:*:*:*:*:*:*", "matchCriteriaId": "91529C45-FA55-4844-A153-682F729F440D", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.7:-:*:*:*:*:*:*", "matchCriteriaId": "64B56778-2698-493D-80AD-B4AE81F48124", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.7:h1:*:*:*:*:*:*", "matchCriteriaId": "0A9D3E2E-BA37-4F2A-BD43-97DD93E43D08", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.7:h10:*:*:*:*:*:*", "matchCriteriaId": "77D82E5A-8BF3-4551-B4FE-2B03113789AA", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.7:h11:*:*:*:*:*:*", "matchCriteriaId": "5CD54FAD-74B8-4154-9C87-CAF9B7A19E6A", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.7:h2:*:*:*:*:*:*", "matchCriteriaId": "9DCE8F6C-541E-4C61-ABC8-4A618B0DD58D", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.7:h4:*:*:*:*:*:*", "matchCriteriaId": "1E5EF79B-1A25-4AAB-AF2E-D151359E7FFE", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.7:h6:*:*:*:*:*:*", "matchCriteriaId": "E84BA989-C826-4AC8-8152-58ED47437D1D", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.7:h8:*:*:*:*:*:*", "matchCriteriaId": "9F6AC51E-4937-4A82-9BF1-97539DA295BF", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.8:-:*:*:*:*:*:*", "matchCriteriaId": "02EDE7F5-5B2C-4943-8969-B21FBCEE7DF0", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.9:-:*:*:*:*:*:*", "matchCriteriaId": "7A038C02-8B99-4261-BCB5-6EE9E6813B75", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:-:*:*:*:*:*:*", "matchCriteriaId": "A92886DF-C989-47AD-8F68-8F468BBC6E57", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h1:*:*:*:*:*:*", "matchCriteriaId": "9893920B-A00E-4890-A897-EE1CF0751BA0", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h10:*:*:*:*:*:*", "matchCriteriaId": "D1289923-12D8-4FDD-B18B-C52516F14922", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h12:*:*:*:*:*:*", "matchCriteriaId": "AFC923D7-672D-4556-8344-BBD285324067", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h21:*:*:*:*:*:*", "matchCriteriaId": "E1510DE9-04A3-4E08-872D-C0F6041BCFCD", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h25:*:*:*:*:*:*", "matchCriteriaId": "2FA04925-5B8A-439E-AECD-1BDFD83F69C5", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h26:*:*:*:*:*:*", "matchCriteriaId": "424C66D4-97F6-408A-B3AE-FE1A90E3ACE6", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h27:*:*:*:*:*:*", "matchCriteriaId": "8AC1F50E-E6C2-4008-9955-7473DB169171", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h28:*:*:*:*:*:*", "matchCriteriaId": "6748CF45-9C54-4BB8-936D-C96F0FCA71BA", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h30:*:*:*:*:*:*", "matchCriteriaId": "7950C7F0-DE1B-4561-B5A2-B61BA7D73B57", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h32:*:*:*:*:*:*", "matchCriteriaId": "C5D6D1C1-0905-40AB-9A86-6E143A395344", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h33:*:*:*:*:*:*", "matchCriteriaId": "9386887C-52E9-4C59-ABFE-058124FE9809", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h35:*:*:*:*:*:*", "matchCriteriaId": "A8B3A647-5755-4AD2-9317-6B4D190E710F", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h4:*:*:*:*:*:*", "matchCriteriaId": "31CD3B15-2CE0-404A-9542-9C39B8E71027", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h5:*:*:*:*:*:*", "matchCriteriaId": "0194DA0B-041A-4810-8BFB-2308290517B3", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h7:*:*:*:*:*:*", "matchCriteriaId": "69E64D86-034F-4BC7-9A4E-2703D834EBC1", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.10:h9:*:*:*:*:*:*", "matchCriteriaId": "B992628F-1114-4FC8-9364-800ACE997044", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.11:-:*:*:*:*:*:*", "matchCriteriaId": "D15D95C8-1FFB-47C4-AD49-107BB8FDE779", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.12:-:*:*:*:*:*:*", "matchCriteriaId": "F856DE79-C7E3-42A5-8B0B-6DBBAAE2740D", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:-:*:*:*:*:*:*", "matchCriteriaId": "9223B0D4-6194-4684-8EF4-84A0EF511D8F", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h1:*:*:*:*:*:*", "matchCriteriaId": "CB16C018-2B70-4F4D-9025-69FF82CD40F0", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h10:*:*:*:*:*:*", "matchCriteriaId": "7F25EFAE-C04B-4CC5-BF8C-D07AF35957B6", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h11:*:*:*:*:*:*", "matchCriteriaId": "0F6CAA2D-326A-4A14-91CB-576CBECA2AC1", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h12:*:*:*:*:*:*", "matchCriteriaId": "A810539F-64B5-4020-963E-5B5E8FB4AC78", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h15:*:*:*:*:*:*", "matchCriteriaId": "CDF02907-B45A-4975-82C5-7C96DA7AF7AF", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h2:*:*:*:*:*:*", "matchCriteriaId": "1259B519-130D-4584-86AA-E4EA1E89ACB2", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h3:*:*:*:*:*:*", "matchCriteriaId": "0DCA6D54-E623-4985-B35F-AC98299828EF", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h5:*:*:*:*:*:*", "matchCriteriaId": "8EF755C9-3BCE-4194-A74E-7D12F524929A", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h6:*:*:*:*:*:*", "matchCriteriaId": "7736DCE5-2943-4EF6-B9D3-B69CB59DB078", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h7:*:*:*:*:*:*", "matchCriteriaId": "D9BA69E2-F499-422B-B07B-5211EF79EBEB", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h8:*:*:*:*:*:*", "matchCriteriaId": "56E49A3E-D380-4243-B587-3E1519C0A40F", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.13:h9:*:*:*:*:*:*", "matchCriteriaId": "E6C465C7-9EBA-4162-B5E2-D394149083EB", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.14:-:*:*:*:*:*:*", "matchCriteriaId": "20A38461-BC7E-4D75-A168-FA493955A54C", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.15:-:*:*:*:*:*:*", "matchCriteriaId": "B0A9D311-0D02-49CC-9EA8-95F92A73405A", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.16:-:*:*:*:*:*:*", "matchCriteriaId": "6C05E25F-AF2E-4A41-A63D-9E783DC113BB", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.16:h1:*:*:*:*:*:*", "matchCriteriaId": "0FADD1AB-1B0A-4B9E-941C-F45A9A932E8A", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.16:h2:*:*:*:*:*:*", "matchCriteriaId": "2D13A4D0-C829-4C9C-916B-D59DEBFC4482", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.16:h3:*:*:*:*:*:*", "matchCriteriaId": "272A10D8-6039-4C76-8B3C-47B7B3710344", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*", "matchCriteriaId": "7E4D3A51-0A40-4B19-AAFC-A2484B1CF5D7", "versionEndExcluding": "11.2.4", "versionStartIncluding": "11.2.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:-:*:*:*:*:*:*", "matchCriteriaId": "C01AD190-F3C2-4349-A063-8C5C78B725B9", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h1:*:*:*:*:*:*", "matchCriteriaId": "30F4CD1C-6862-4279-8D2D-40B4D164222F", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h10:*:*:*:*:*:*", "matchCriteriaId": "8137F3AF-BA32-41BC-AD2E-A668FFA33892", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h11:*:*:*:*:*:*", "matchCriteriaId": "8C977AF0-D2B0-401A-A7C5-A1C71AC3C072", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h12:*:*:*:*:*:*", "matchCriteriaId": "B9C0A53F-2AFE-4B0D-AEC1-464E6001E02F", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h14:*:*:*:*:*:*", "matchCriteriaId": "D720448D-F40B-4C92-9101-A48AC36C9CBF", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h15:*:*:*:*:*:*", "matchCriteriaId": "5F12F7AC-D5B3-499E-87DA-27427D8BFFC5", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h17:*:*:*:*:*:*", "matchCriteriaId": "37F41E72-9690-4BB2-BD60-0B06A7DE2329", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h18:*:*:*:*:*:*", "matchCriteriaId": "34E9893A-7ADF-4556-AA7C-D69162307950", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h2:*:*:*:*:*:*", "matchCriteriaId": "A52B7A7A-483A-4075-B1E9-5C14B66F7FC3", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h20:*:*:*:*:*:*", "matchCriteriaId": "7338C509-BCCE-4D2A-8E9A-D54180460E89", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h3:*:*:*:*:*:*", "matchCriteriaId": "6E46608E-682E-47B8-B810-8714571286C5", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h4:*:*:*:*:*:*", "matchCriteriaId": "76949F0F-2ADC-492F-83F0-0A1B0E861F97", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h5:*:*:*:*:*:*", "matchCriteriaId": "C1DD83BC-4E8E-4C1D-80C7-A6209B4E70CE", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h6:*:*:*:*:*:*", "matchCriteriaId": "73888909-64C5-41BC-BAE0-BD9BDEEAF723", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h7:*:*:*:*:*:*", "matchCriteriaId": "E7861D82-815D-4894-9E11-1B6B1E66CDEC", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h8:*:*:*:*:*:*", "matchCriteriaId": "D269E33D-9A79-40CC-B79A-C9A398AB7AFE", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h9:*:*:*:*:*:*", "matchCriteriaId": "9762E441-856F-466F-812C-798CA2EEF965", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.2.5:*:*:*:*:*:*:*", "matchCriteriaId": "0EF09924-12F7-4F76-9FD0-08AF707AA289", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.2.6:-:*:*:*:*:*:*", "matchCriteriaId": "693CF6CD-16BF-4F5C-9521-4A8A9C8CDB0B", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:-:*:*:*:*:*:*", "matchCriteriaId": "0A25C9D9-BC83-49AE-BEE7-EF05F8336B01", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h1:*:*:*:*:*:*", "matchCriteriaId": "A93C2B58-EC78-4C3D-89FF-35D9C489E39F", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h10:*:*:*:*:*:*", "matchCriteriaId": "A32E35C0-913E-4348-8AD4-E1F169C40C92", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h11:*:*:*:*:*:*", "matchCriteriaId": "39112398-2A93-4E26-A7DF-0E3FA81C5130", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h12:*:*:*:*:*:*", "matchCriteriaId": "C88442D1-599F-411D-B7A2-E17AA839F177", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h13:*:*:*:*:*:*", "matchCriteriaId": "B3B538CC-6EA0-4555-B828-18A55997F454", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h14:*:*:*:*:*:*", "matchCriteriaId": "A50BD9F2-F961-4ACE-9FDB-456E92692AE3", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h15:*:*:*:*:*:*", "matchCriteriaId": "DF22EEA1-B00E-4A5F-87FB-60AD7A5A762B", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h16:*:*:*:*:*:*", "matchCriteriaId": "825D883D-FB41-4E92-A6B5-EB34BFE36A67", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h17:*:*:*:*:*:*", "matchCriteriaId": "2F4B0A4F-18B6-40F7-8445-9B51CF3E9AA2", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h18:*:*:*:*:*:*", "matchCriteriaId": "4FDFF3FA-9997-494C-B9DC-D96A95390838", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h19:*:*:*:*:*:*", "matchCriteriaId": "7EC1C664-929E-4335-9179-97DA3BD00A7E", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h2:*:*:*:*:*:*", "matchCriteriaId": "D12C3EB6-842E-4378-896C-FDBB2BC75D10", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h3:*:*:*:*:*:*", "matchCriteriaId": "86B41903-FF08-454D-B626-184CB73B122E", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h4:*:*:*:*:*:*", "matchCriteriaId": "396DC378-7716-40F6-88A4-99299A16CAF1", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h7:*:*:*:*:*:*", "matchCriteriaId": "5E5C6E3A-262C-4212-B21C-00E8079AA8CF", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.2.7:h8:*:*:*:*:*:*", "matchCriteriaId": "4C855108-D3C9-4DE3-B9F4-9735A0A439AF", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.2.8:-:*:*:*:*:*:*", "matchCriteriaId": "6C97ECF7-BE69-4C51-8431-95778F0225F8", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.2.9:*:*:*:*:*:*:*", "matchCriteriaId": "02713C77-26D8-4C84-A8B2-86B6BA5BE600", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:-:*:*:*:*:*:*", "matchCriteriaId": "051673AB-50BF-4DD0-8679-F5825520241A", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h1:*:*:*:*:*:*", "matchCriteriaId": "BAC15D8A-83CA-413F-BA2B-17EC2B169F6E", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h10:*:*:*:*:*:*", "matchCriteriaId": "FEAE5273-8618-4DDF-810E-37BF0EDE970B", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h12:*:*:*:*:*:*", "matchCriteriaId": "BB18719E-1F5B-4915-910B-02F99C1BC0C8", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h13:*:*:*:*:*:*", "matchCriteriaId": "1DF72687-302F-4993-A095-261DAE557157", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h2:*:*:*:*:*:*", "matchCriteriaId": "70B3EB0C-87F1-46C2-B95C-C5808E473BD2", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h3:*:*:*:*:*:*", "matchCriteriaId": "073BF631-451B-4DFC-B23C-F0F68C2450F0", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h4:*:*:*:*:*:*", "matchCriteriaId": "13AA1BEF-F2F6-4534-89F3-DF4E79217978", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h5:*:*:*:*:*:*", "matchCriteriaId": "CBFDE611-4981-4D92-ABAF-858DF132535F", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h6:*:*:*:*:*:*", "matchCriteriaId": "AAEA66F4-81AC-49C3-81B1-65EF5F16951A", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h7:*:*:*:*:*:*", "matchCriteriaId": "09187411-13D4-4F5C-AF42-0716F3C96129", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h8:*:*:*:*:*:*", "matchCriteriaId": "019D37D8-94E4-4228-BCE3-A08E842AE1D1", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.2.10:h9:*:*:*:*:*:*", "matchCriteriaId": "7FE1FC3F-8682-4AB8-BF98-33783263952E", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.2.11:-:*:*:*:*:*:*", "matchCriteriaId": "CE68AC6C-61B6-4245-96AE-3D1F96D44721", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.2.12:-:*:*:*:*:*:*", "matchCriteriaId": "15E09591-687F-4874-8D04-332BDD1C0340", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.2.13:-:*:*:*:*:*:*", "matchCriteriaId": "C4DAEA27-1D28-47CF-8BDC-BDD66B0C87FB", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.2.13:h1:*:*:*:*:*:*", "matchCriteriaId": "73F0F922-C421-4E41-806F-1AF902E48DB9", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.2.13:h2:*:*:*:*:*:*", "matchCriteriaId": "3D59E2C7-F130-447E-8F14-33A3BA67699E", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.2.13:h3:*:*:*:*:*:*", "matchCriteriaId": "1A192C47-D7F0-47E1-B711-46AC39B621A5", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.2.15:-:*:*:*:*:*:*", "matchCriteriaId": "CEFF2568-95AD-44CD-A370-5FC260D5E2D1", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.2.16:-:*:*:*:*:*:*", "matchCriteriaId": "CB3A817B-55B2-43A7-9C29-122F0911096C", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*", "matchCriteriaId": "181F9096-34AB-483A-B33F-F4A7F250052F", "versionEndExcluding": "12.1.4", "versionStartIncluding": "12.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:-:*:*:*:*:*:*", "matchCriteriaId": "8C1ADE94-3F05-48EE-94E0-FD6EB682705C", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h10:*:*:*:*:*:*", "matchCriteriaId": "7346F91C-F2DD-4974-AB7C-CC8CAA4FC622", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h11:*:*:*:*:*:*", "matchCriteriaId": "7DB93F18-BA89-40B5-BE21-3A92B2605EE6", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h12:*:*:*:*:*:*", "matchCriteriaId": "B228660E-DB3D-4A3D-BCF2-595AEC41A806", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h2:*:*:*:*:*:*", "matchCriteriaId": "F727C18E-1C8D-448A-954C-073294FBC65C", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h3:*:*:*:*:*:*", "matchCriteriaId": "7E492BE6-EB2E-4616-85EA-3B389741301B", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h5:*:*:*:*:*:*", "matchCriteriaId": "E5F85240-989D-4E2D-B2D0-F0F35E0590A4", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h6:*:*:*:*:*:*", "matchCriteriaId": "3D64D659-40F8-4A02-8385-954BE50C22CE", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h7:*:*:*:*:*:*", "matchCriteriaId": "2320DB49-D6E3-44D1-AE4C-F1312CA542CF", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h8:*:*:*:*:*:*", "matchCriteriaId": "6DC0027E-AF6F-4B31-AC63-E6521DD0D53E", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:12.1.4:h9:*:*:*:*:*:*", "matchCriteriaId": "45727CFE-4BB8-4009-B96C-272E7E64A152", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:12.1.5:-:*:*:*:*:*:*", "matchCriteriaId": "0DF08D3C-62B3-4875-972A-CDF35D2786B2", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:12.1.6:-:*:*:*:*:*:*", "matchCriteriaId": "7C32D27E-BCD7-4F26-B802-B6EA931B0F40", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:12.1.7:-:*:*:*:*:*:*", "matchCriteriaId": "CFE9B2D8-346B-4FC3-AFC8-3DC715B7C044", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:12.1.7:h1:*:*:*:*:*:*", "matchCriteriaId": "5D8051BF-DCD1-4AFD-B5C7-97D0AF135C6E", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:12.1.7:h2:*:*:*:*:*:*", "matchCriteriaId": "8E18CFE2-6D34-48B5-A8E9-EFA9301B4AF3", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:12.1.7:h3:*:*:*:*:*:*", "matchCriteriaId": "7BE1D920-2932-425D-9536-06F533D61E51", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:12.1.7:h5:*:*:*:*:*:*", "matchCriteriaId": "66DAD4E3-488E-4864-A1F1-924D49345489", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:12.1.7:h6:*:*:*:*:*:*", "matchCriteriaId": "425BE35D-8133-44B9-A22E-F4CB45A24ABE", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:12.1.7:h8:*:*:*:*:*:*", "matchCriteriaId": "CA4E3BBB-2146-4C06-9F5B-F7E088FEA114", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:12.1.7:h9:*:*:*:*:*:*", "matchCriteriaId": "27BA318F-338F-473D-9D8E-ADEB128159B6", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:12.1.8:-:*:*:*:*:*:*", "matchCriteriaId": "C78C08EE-7715-486C-AE8F-8D48CBB19341", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:12.1.9:-:*:*:*:*:*:*", "matchCriteriaId": "476DFE81-AB3D-4437-8F9A-9CF41D5B7D70", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:12.1.10:-:*:*:*:*:*:*", "matchCriteriaId": "43F446D6-65F2-4281-BED6-7491011E5365", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:12.1.10:h2:*:*:*:*:*:*", "matchCriteriaId": "02258BA6-D32E-4298-9284-E88C45215C40", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*", "matchCriteriaId": "773DEDA9-ED1B-404B-97ED-BB95D7C766BD", "versionEndExcluding": "12.2.4", "versionStartIncluding": "12.2.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:12.2.4:-:*:*:*:*:*:*", "matchCriteriaId": "DAF4FC60-530D-4CBF-A16B-BFB2E1B698AF", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:-:*:*:*:*:*:*:*", "matchCriteriaId": "9596C09F-1353-45AE-BD8F-B7EE67A142E4", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:paloaltonetworks:panorama_m-200:-:*:*:*:*:*:*:*", "matchCriteriaId": "7C62FBF7-0D37-4CA1-872B-7B6BA3702890", "vulnerable": false}, {"criteria": "cpe:2.3:h:paloaltonetworks:panorama_m-300:-:*:*:*:*:*:*:*", "matchCriteriaId": "8DE8F01C-739C-4A03-9ECB-181CDD5A9609", "vulnerable": false}, {"criteria": "cpe:2.3:h:paloaltonetworks:panorama_m-500:-:*:*:*:*:*:*:*", "matchCriteriaId": "8AC66517-BD14-47D9-8CCF-09F325226C23", "vulnerable": false}, {"criteria": "cpe:2.3:h:paloaltonetworks:panorama_m-600:-:*:*:*:*:*:*:*", "matchCriteriaId": "82EAD013-E74C-43A6-BE16-B4F6950A0F88", "vulnerable": false}, {"criteria": "cpe:2.3:h:paloaltonetworks:panorama_m-700:-:*:*:*:*:*:*:*", "matchCriteriaId": "163E8C8E-71A5-48A1-967F-3FA212BF8CF6", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:paloaltonetworks:panorama_virtual_appliance:-:*:*:*:*:*:*:*", "matchCriteriaId": "224E91A3-34BA-4FA4-A503-D23E084BC428", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:-:*:*:*:*:*:*:*", "matchCriteriaId": "9596C09F-1353-45AE-BD8F-B7EE67A142E4", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:paloaltonetworks:wf-500:-:*:*:*:*:*:*:*", "matchCriteriaId": "3F9D532F-67BA-438B-8BD5-65B2EADF35D8", "vulnerable": false}, {"criteria": "cpe:2.3:h:paloaltonetworks:wf-500-b:-:*:*:*:*:*:*:*", "matchCriteriaId": "FFE4B73A-0C35-4254-B028-A7E587780888", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE)."}, {"lang": "es", "value": "PHP utiliza la funci\u00f3n `longjmp()` para los errores de falta de memoria (OOM), con el fin de salir del contexto actual y abortar la gesti\u00f3n de la solicitud. Es posible que algunos contextos no tengan debidamente en cuenta esta situaci\u00f3n y dejen la memoria de la solicitud en un estado no inicializado antes de realizar una asignaci\u00f3n. El procedimiento posterior de limpieza de la solicitud podr\u00eda leer o realizar una ramificaci\u00f3n en esta memoria. Existen m\u00faltiples estrategias de gesti\u00f3n de OOM que pueden desencadenar esta condici\u00f3n de forma sistem\u00e1tica y dar lugar a la ejecuci\u00f3n remota de c\u00f3digo (RCE)."}], "id": "CVE-2026-109618", "lastModified": "2026-10-23T16:26:54.713", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "HIGH", "attackRequirements": "PRESENT", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 9.2, "baseSeverity": "CRITICAL", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "security@php.net", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-109618", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-10-21T00:00:00+00:00", "version": "2.0.3"}}]}, "published": "2026-10-21T14:17:09.357", "references": [{"source": "security@php.net", "tags": ["Mitigation", "Vendor Advisory"], "url": "https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://www.openwall.com/lists/oss-security/2026/10/21/6"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://www.openwall.com/lists/oss-security/2026/10/23/5"}, {"source": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e", "tags": ["Third Party Advisory"], "url": "https://cert-portal.siemens.com/productcert/html/ssa-566512.html"}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "tags": ["Third Party Advisory"], "url": "https://www.wiz.io/blog/php2shell-php-rce"}], "sourceIdentifier": "security@php.net", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-416"}, {"lang": "en", "value": "CWE-755"}, {"lang": "en", "value": "CWE-824"}, {"lang": "en", "value": "CWE-1325"}], "source": "security@php.net", "type": "Secondary"}]}

{"affected_release": [{"advisory": "RHSA-2026:87070", "cpe": "cpe:/o:redhat:enterprise_linux:10.2", "package": "php-0:8.3.36-1.el10_2", "product_name": "Red Hat Enterprise Linux 10", "release_date": "2026-10-21T00:00:00Z"}, {"advisory": "RHSA-2026:87071", "cpe": "cpe:/o:redhat:enterprise_linux:10.2", "package": "php8.4-0:8.4.27-1.el10_2", "product_name": "Red Hat Enterprise Linux 10", "release_date": "2026-10-21T00:00:00Z"}, {"advisory": "RHSA-2026:87073", "cpe": "cpe:/a:redhat:enterprise_linux:8", "package": "php:8.2-8100020261020140951.f7998665", "product_name": "Red Hat Enterprise Linux 8", "release_date": "2026-10-21T00:00:00Z"}, {"advisory": "RHSA-2026:87080", "cpe": "cpe:/a:redhat:enterprise_linux:8", "package": "php:7.4-8100020261021081045.f7998665", "product_name": "Red Hat Enterprise Linux 8", "release_date": "2026-10-21T00:00:00Z"}, {"advisory": "RHSA-2026:87072", "cpe": "cpe:/a:redhat:enterprise_linux:9", "package": "php:8.2-9080020261020145734.9", "product_name": "Red Hat Enterprise Linux 9", "release_date": "2026-10-21T00:00:00Z"}, {"advisory": "RHSA-2026:87079", "cpe": "cpe:/a:redhat:enterprise_linux:9", "package": "php:8.3-9080020261020115403.9", "product_name": "Red Hat Enterprise Linux 9", "release_date": "2026-10-21T00:00:00Z"}, {"advisory": "RHSA-2026:87151", "cpe": "cpe:/a:redhat:enterprise_linux:9", "package": "php-0:8.0.30-8.el9_8.1", "product_name": "Red Hat Enterprise Linux 9", "release_date": "2026-10-21T00:00:00Z"}, {"advisory": "RHSA-2026:87414", "cpe": "cpe:/a:redhat:hummingbird:1", "package": "php-main-8.5.12-1.hum1", "product_name": "Red Hat Hardened Images", "release_date": "2026-10-21T00:00:00Z"}], "bugzilla": {"description": "php: OOM bailout during request parsing leads to memory corruption and RCE", "id": "2553995", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2553995"}, "csaw": true, "cvss3": {"cvss3_base_score": "8.1", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "status": "verified"}, "cwe": "CWE-416", "details": ["A flaw was found in PHP's memory limit handling during request parsing. PHP records certain state as ready for use before all required memory allocations complete. If an allocation fails due to memory exhaustion, the incomplete state is not rolled back. Subsequent cleanup operations treat the uninitialized memory as valid, leading to memory corruption. An unauthenticated attacker can exploit this via crafted HTTP requests to achieve remote code execution against mod_php with default configuration, and against FPM through application-stage paths."], "mitigation": {"lang": "en:us", "value": "See the security bulletin for a detailed mitigation procedure."}, "name": "CVE-2026-109618", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Under investigation", "package_name": "php", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Under investigation", "package_name": "php", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Affected", "package_name": "php:8.4/php", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:openshift_ai", "fix_state": "Not affected", "package_name": "rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9", "product_name": "Red Hat OpenShift AI (RHOAI)"}, {"cpe": "cpe:/a:redhat:openshift_devspaces:3", "fix_state": "Not affected", "package_name": "devspaces/code-rhel9", "product_name": "Red Hat OpenShift Dev Spaces"}, {"cpe": "cpe:/a:redhat:openshift_devspaces:3", "fix_state": "Affected", "package_name": "devspaces/udi-rhel9", "product_name": "Red Hat OpenShift Dev Spaces"}], "public_date": "2026-10-21T14:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-109618\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-109618\nhttps://access.redhat.com/security/vulnerabilities/RHSB-2026-013\nhttps://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w"], "statement": "Rated Important. An unauthenticated remote attacker could corrupt engine memory and potentially execute arbitrary code, but reliable exploitation requires precise heap manipulation and timing. Standard Red Hat Enterprise Linux deployments use PHP-FPM rather than mod_php. PHP-FPM workers exit on early initialization failures before reaching the corrupted structures, so remote code execution is difficult in practice and typically requires non-default behavior such as parsing a second request body during script execution.", "threat_severity": "Important"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[8.2.0,8.2.35)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[8.3.0,8.3.36)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[8.4.0,8.4.27)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[8.5.0,8.5.12)"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "PHP", "source": "cna", "vendor": "PHP Group"}, "product": "php", "vendor": "php"}], "created": "2026-10-21T19:45:03.550470+00:00", "updated": "2026-10-23T19:15:14.487251+00:00", "vendors": ["php", "php$PRODUCT$php"]}