PT-2026-145273
CVE-2026-119723
·
Published
2026-11-11
·
Updated
2026-11-11
Description by
Score
N/A
Not availableNo severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions
HHVM versions prior to 23c061f4e804a51badd5f85227e65185651253b5
Description
An issue exists when parsing request variables, specifically query-string and form parameters. The system fails to verify if appending a nested array was successful before attempting to descend into it. This allows a remote, unauthenticated attacker to send a GET or POST request that crashes the server process before application code executes, resulting in a denial of service.
Recommendations
Update HHVM to version 23c061f4e804a51badd5f85227e65185651253b5 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾