Two critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619) can allow unauthenticated attackers to execute code on affected web servers. Both carry a CVSS v4.0 score of 9.2, and exploitation attempts are already being observed in the wild. PHP has released the following fixed versions: PHP branch Fixed version PHP…
Critical PHP Security Update: Two RCE Flaws (CVE-2026-109618, CVE-2026-109619)
Full Disclosure: This webpage may contain affiliate links, in which the website owner would receive a commission for purchases made. This does not affect your purchase cost.
