Vulnerabilities
PHP issues emergency patches for two critical remote code execution flaws
The PHP project releases unscheduled fixes for CVE-2026-109618 and CVE-2026-109619 after early attacks were detected by infrastructure providers.
CVE-2026-109618
Everything SecOps Monitor has reported about CVE-2026-109618: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Will Your PHP Servers Survive Two Unconfirmed Critical RCE Flaws?
PHP issues emergency update for two 9.2-rated remote code execution flaws, but scope remains unverified by the vendor.