Oct 21, 2026
securityphp
PHP 8.2–8.5 Under Pressure: CVE-2026-109618 and CVE-2026-109619 RCEs
Two critical PHP flaws, CVE-2026-109618 and CVE-2026-109619, can let unauthenticated requests reach remote code execution on vulnerable servers. The PHP project released fixes for PHP 8.2–8.5 on October 21. Here is what each bug does, which deployments need attention, and what to do now.
Read article