{
    "standards": {
        "primary_cve": "CVE-2026-109618",
        "secondary_cve": "CVE-2026-109619",
        "cvss_score": 9.2,
        "cvss_vector": "CVSS:4.0\/AV:N\/AC:L\/AT:N\/PR:N\/UI:N\/VC:H\/VI:H\/VA:H\/SC:N\/SI:N\/SA:N",
        "cwe": [
            "CWE-416",
            "CWE-703",
            "CWE-119"
        ],
        "official_advisories": [
            "https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-109618",
            "https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2026-109619",
            "https:\/\/www.php.net\/releases\/"
        ]
    },
    "runtime": {
        "php_version": "8.4.4",
        "sapi": "fpm-fcgi",
        "is_vulnerable_engine": true,
        "session_upload_progress_enabled": true,
        "session_upload_progress_cleanup": false,
        "memory_limit": "32M",
        "opcache_enabled": true
    },
    "telemetry": {
        "attempts": 3,
        "last_hit": "2026-10-22T10:27:20+00:00"
    },
    "mitigation_status": {
        "mitigated": false,
        "posture": "VULNERABLE (Unpatched engine + active upload progress vector)"
    },
    "researcher": {
        "name": "Suraj Tiwari",
        "role": "Solutions Architect & Cyber Hobbyist",
        "bio": "Suraj Tiwari is just a normal developer, a solutions architect and hobbyist in cyber space.",
        "github": "https:\/\/github.com\/Suraj-Tiwari",
        "twitter": "@surajtiwari020",
        "co_creator": {
            "name": "CP Dhaundiyal",
            "x": "@dhaundiyalcp",
            "url": "https:\/\/x.com\/dhaundiyalcp"
        },
        "policy": "Coordinated Vulnerability Disclosure"
    }
}