Vulnerability Database
Blog
FAQ
Docs
arrow_forward
search
light_mode
dark_mode
ECHO-1cb9-f463-f8da
See a problem?
Import Source
https://advisory.echohq.com/osv/ECHO-1cb9-f463-f8da.json
JSON Data
https://api.osv.dev/v1/vulns/ECHO-1cb9-f463-f8da
Upstream
CVE-2026-109619
Published
2026-10-21T16:28:58Z
Modified
2026-10-21T16:45:03Z
Summary
[none]
Details
References
https://advisory.echohq.com/cve/CVE-2026-109619
https://nvd.nist.gov/vuln/detail/CVE-2026-109619
https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp
https://www.wiz.io/blog/php2shell-php-rce
Affected packages
Echo
php-8.2
Package
Name
php-8.2
Purl
pkg:deb/echo/php-8.2
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
8.2.35+e1
Database specific
source
"https://advisory.echohq.com/osv/ECHO-1cb9-f463-f8da.json"
php-8.2-zts
Package
Name
php-8.2-zts
Purl
pkg:deb/echo/php-8.2-zts
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
8.2.35+e1
Database specific
source
"https://advisory.echohq.com/osv/ECHO-1cb9-f463-f8da.json"
php-8.3
Package
Name
php-8.3
Purl
pkg:deb/echo/php-8.3
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
8.3.36+e1
Database specific
source
"https://advisory.echohq.com/osv/ECHO-1cb9-f463-f8da.json"
php-8.3-zts
Package
Name
php-8.3-zts
Purl
pkg:deb/echo/php-8.3-zts
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
8.3.36+e1
Database specific
source
"https://advisory.echohq.com/osv/ECHO-1cb9-f463-f8da.json"
php-8.4
Package
Name
php-8.4
Purl
pkg:deb/echo/php-8.4
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
8.4.27+e1
Database specific
source
"https://advisory.echohq.com/osv/ECHO-1cb9-f463-f8da.json"
php-8.4-zts
Package
Name
php-8.4-zts
Purl
pkg:deb/echo/php-8.4-zts
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
8.4.27+e1
Database specific
source
"https://advisory.echohq.com/osv/ECHO-1cb9-f463-f8da.json"
php-8.5
Package
Name
php-8.5
Purl
pkg:deb/echo/php-8.5
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
8.5.12+e1
Database specific
source
"https://advisory.echohq.com/osv/ECHO-1cb9-f463-f8da.json"
php-8.5-zts
Package
Name
php-8.5-zts
Purl
pkg:deb/echo/php-8.5-zts
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
8.5.12+e1
Database specific
source
"https://advisory.echohq.com/osv/ECHO-1cb9-f463-f8da.json"
ECHO-1cb9-f463-f8da - OSV