Vulnerability Database
Blog
FAQ
Docs
arrow_forward
search
light_mode
dark_mode
ECHO-3b6e-9e7f-34fe
See a problem?
Import Source
https://advisory.echohq.com/osv/ECHO-3b6e-9e7f-34fe.json
JSON Data
https://api.osv.dev/v1/vulns/ECHO-3b6e-9e7f-34fe
Upstream
CVE-2026-109618
Published
2026-10-21T16:28:58Z
Modified
2026-10-21T16:45:03Z
Summary
[none]
Details
References
https://advisory.echohq.com/cve/CVE-2026-109618
https://nvd.nist.gov/vuln/detail/CVE-2026-109618
https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w
https://www.wiz.io/blog/php2shell-php-rce
Affected packages
Echo
php-8.2
Package
Name
php-8.2
Purl
pkg:deb/echo/php-8.2
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
8.2.35+e1
Database specific
source
"https://advisory.echohq.com/osv/ECHO-3b6e-9e7f-34fe.json"
php-8.2-zts
Package
Name
php-8.2-zts
Purl
pkg:deb/echo/php-8.2-zts
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
8.2.35+e1
Database specific
source
"https://advisory.echohq.com/osv/ECHO-3b6e-9e7f-34fe.json"
php-8.3
Package
Name
php-8.3
Purl
pkg:deb/echo/php-8.3
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
8.3.36+e1
Database specific
source
"https://advisory.echohq.com/osv/ECHO-3b6e-9e7f-34fe.json"
php-8.3-zts
Package
Name
php-8.3-zts
Purl
pkg:deb/echo/php-8.3-zts
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
8.3.36+e1
Database specific
source
"https://advisory.echohq.com/osv/ECHO-3b6e-9e7f-34fe.json"
php-8.4
Package
Name
php-8.4
Purl
pkg:deb/echo/php-8.4
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
8.4.27+e1
Database specific
source
"https://advisory.echohq.com/osv/ECHO-3b6e-9e7f-34fe.json"
php-8.4-zts
Package
Name
php-8.4-zts
Purl
pkg:deb/echo/php-8.4-zts
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
8.4.27+e1
Database specific
source
"https://advisory.echohq.com/osv/ECHO-3b6e-9e7f-34fe.json"
php-8.5
Package
Name
php-8.5
Purl
pkg:deb/echo/php-8.5
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
8.5.12+e1
Database specific
source
"https://advisory.echohq.com/osv/ECHO-3b6e-9e7f-34fe.json"
php-8.5-zts
Package
Name
php-8.5-zts
Purl
pkg:deb/echo/php-8.5-zts
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
8.5.12+e1
Database specific
source
"https://advisory.echohq.com/osv/ECHO-3b6e-9e7f-34fe.json"
ECHO-3b6e-9e7f-34fe - OSV