⌂

🐞 CVE Tracking and Search

Search and filter Common Vulnerabilities and Exposures

About this page

Every CVE mentioned in the news ThreatFeed reads, with its severity, how likely it is to be exploited (EPSS), whether it is on CISA's Known Exploited Vulnerabilities list, and any public exploit code in Metasploit or ExploitDB. Use it to find the vulnerabilities being exploited or talked about now: search by CVE or keyword, and narrow by time window, severity or source. Each CVE has an AI action plan: patch now, mitigate or watch.

🔎 Search & Filters Clear All
Search: Time Range:
Sources:
📚 Intelligence Coverage the corpus behind every search on this page
387,824+
CVEs Tracked
387,824
Exploit Intel
369,032
EPSS Scored
5,524
CISA KEV
2,722
Metasploit Modules
30,393
ExploitDB Entries
61
MITRE ATT&CK Maps
🚨 Exploitation Status within the current filter · click a card to jump to it
0
Actively Exploited
0
CISA KEV
0
PoC Available
0
Zero-Days
0
Recent Discoveries
1
Most Mentioned
📊 CVE Severity Distribution last 30 days
🐞 Results 1 CVEs in the last 30 days
CVE-2026-109618 CRITICAL CVSS: 9.8 EPSS: 100.0% VulnCheck KEV Weaponized ExploitDB MOST MENTIONED (9 articles) CWE-416 CWE-755 CWE-824 CWE-1325 T1203
PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).
Published: 2026-10-21
Mentioned in 9 article(s):
CVE-2026-46300 - Linux Kernel Missing Initialization of a Variable Vulnerability
Recent KEV Entries
CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution
The Hacker News
PHP2Shell security flaws now sucessfully exploited in the wild
BleepingComputer
CVE-2026-109618 - PHP Memory Corruption Vulnerability
Recent KEV Entries
PHP2Shell Exploitation Hits Government Entity Amid Global Scanning and Signs of AI-Assisted Hacking
The Hacker News