22nd Oct 2026
Critical PHP RCE Update: Check Every Hosting PHP Handler
Two critical PHP flaws require more than one version check
The PHP project has released security updates for two critical vulnerabilities that can allow an unauthenticated attacker to execute code on a server handling web requests.
The issues CVE-2026-109618 and CVE-2026-109619 are each rated CVSS v4.0 9.2. PHP says all installations serving web ...
