Vulnerabilities
Patch PHP Servers Immediately for Critical CVE-2026-109618 and CVE-2026-109619 Flaws
PHP users must prepare to update all versions from PHP 5 onwards by October 21, 2026, to fix two critical remote code execution vulnerabilities.
CVE-2026-109618
Everything Patch Review has reported about CVE-2026-109618: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Prepare PHP servers for imminent high-severity patches on CVE-2026-109618 and CVE-2026-109619
PHP maintainers warn that two severe flaws affect versions back to 2004, urging admins to ready systems for an upcoming update release.