PHP CVE-2026-109618/9 multipart PHP_SESSION_UPLOAD_PROGRESS upload attempt
Detects HTTP POST requests containing multipart/form-data with PHP_SESSION_UPLOAD_PROGRESS, which is associated with CVE-2026-109618 and CVE-2026-109619 exploitation attempts, tracked via a detection filter.
Suricata
