{"schema_version":"1.0","report_date":"2026-10-22","generated_at":"2026-10-22T15:11:23.434409+09:00","quality":"OK","source_count":13,"observed_total":5541,"catalog_total":250,"filtered_total":4,"page":1,"limit":20,"has_next":false,"items":[{"cves":[],"epss":null,"id":"CVE-2026-114577","known_exploited":false,"published_date":"2026-10-22","resoarc_impact":"NOT_CONFIRMED","resoarc_response":"UNREVIEWED","response_difficulty":"unknown","severity":"MODERATE","source":"NVD","sources":["NVD"],"summary":"A vulnerability was found in oretnom23 php-travel-agency-system. This vulnerability affects unknown code of the file admin/insert.php of the component Insertion Handler. The manipulation of the argument costomer_id/payment_type/amount/description/user/uploadimage/full_name/visa_no results in sql inj","technologies":[{"group":"runtime","id":"php","label":"PHP"}],"title":"A vulnerability was found in oretnom23 php-travel-agency-system. This vulnerability affects unknown code of the file admin/insert.php of the component Inse","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-114577"},{"cves":[],"epss":null,"id":"CVE-2026-109618","known_exploited":false,"published_date":"2026-10-21","resoarc_impact":"NOT_CONFIRMED","resoarc_response":"UNREVIEWED","response_difficulty":"unknown","severity":"CRITICAL","source":"PHP","sources":["PHP","NVD"],"summary":"21 Oct 2026 PHP 8.2.35 Released! The PHP development team announces the immediate availability of PHP 8.2.35. This is a security release fixing two critical vulnerabilities (CVE-2026-109618, CVE-2026-109619) that can allow unauthenticated remote code execution. All PHP 8.2 users are strongly encoura","technologies":[{"group":"runtime","id":"php","label":"PHP"}],"title":"PHP 8.2.35 Released!","url":"https://www.php.net/archive/2026.php"},{"cves":[],"epss":null,"id":"CVE-2026-109619","known_exploited":false,"published_date":"2026-10-21","resoarc_impact":"NOT_CONFIRMED","resoarc_response":"UNREVIEWED","response_difficulty":"unknown","severity":"CRITICAL","source":"PHP","sources":["PHP","NVD"],"summary":"21 Oct 2026 PHP 8.2.35 Released! The PHP development team announces the immediate availability of PHP 8.2.35. This is a security release fixing two critical vulnerabilities (CVE-2026-109618, CVE-2026-109619) that can allow unauthenticated remote code execution. All PHP 8.2 users are strongly encoura","technologies":[{"group":"runtime","id":"php","label":"PHP"}],"title":"PHP 8.2.35 Released!","url":"https://www.php.net/archive/2026.php"},{"cves":[],"epss":null,"id":"CVE-2026-114403","known_exploited":false,"published_date":"2026-10-21","resoarc_impact":"NOT_CONFIRMED","resoarc_response":"UNREVIEWED","response_difficulty":"unknown","severity":"CRITICAL","source":"NVD","sources":["NVD"],"summary":"PHPOffice PHPPresentation through 1.2.0 contains an insecure deserialization vulnerability that allows attackers to instantiate arbitrary PHP objects by supplying a crafted presentation file. Attackers can upload a ZIP containing PhpPresentation.xml that IOFactory::load passes to unserialize(), enab","technologies":[{"group":"runtime","id":"php","label":"PHP"}],"title":"PHPOffice PHPPresentation through 1.2.0 contains an insecure deserialization vulnerability that allows attackers to instantiate arbitrary PHP objects by su","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-114403"}],"caution":"Only the verified public snapshot's current item set is provided. This endpoint is not an exhaustive CVE archive."}