CVE-2019-11043
CISA KEV RANSOMWARE
ACT NOW
Priority: 0.00
BB Relevance:
0/100
Published: N/A
Modified: N/A
First seen: 2026-10-29
Status: pending_score
Description
In some versions of PHP in certain configurations of FPM setup, it is possible to cause FPM module to write past allocated buffers allowing the possibility of remote code execution.
CISA Known Exploited Vulnerability
Vendor / Product
PHP — FastCGI Process Manager (FPM)
Date Added
2022-03-25
Remediation Due
2022-04-15
Ransomware Use
CONFIRMED
https://nvd.nist.gov/vuln/detail/CVE-2019-11043