Security
Two long-dormant PHP bugs, dubbed PHP2Shell and rated critical, forced banks, hospitals and governments to pull servers offline this week. Patches are out, but millions of systems remain exposed.
Loading…
Search
No phones and 5 stories for “CVE-2026-109618”
Security
Two long-dormant PHP bugs, dubbed PHP2Shell and rated critical, forced banks, hospitals and governments to pull servers offline this week. Patches are out, but millions of systems remain exposed.
Security
PHP has released emergency updates fixing two critical remote code execution flaws. Exploits have been circulating since the night of October 20th after a disclosure leak.
Security
PHP 8.2.35 patches two critical unauthenticated RCE flaws, CVE-2026-109618 and CVE-2026-109619, impacting a vast number of websites. Immediate update required.
Security
Two critical PHP flaws, CVE-2026-109618 and CVE-2026-109619, allow unauthenticated remote code execution. The PHP team says updating is the only safe choice.
Security
PHP is releasing emergency security updates on October 21 at 14:00 UTC for two critical vulnerabilities rated 9.2, reportedly RCE flaws affecting PHP 5 through 8.