News
cybersecurity Optiv Launches CyberBOT Cybersecurity Awareness Training Program - Dark Reading vulnerability USN-8948-2: PHP vulnerabilities - Ubuntu Security Notices cybersecurity LiteLLM 1.107.0 Compromised With A RAT InfoStealer - OX Security cybersecurity Survey Finds High-Profile Executives Feel Untouchable as Digital Exposure Turns Into Physical Risk - Dark Reading cybersecurity Widespread PHP Flaw May Cause Many Site Outages Today - Krebs on Security threat-intel CVE-2026-109618 and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP - Rapid7 Emergent Threat Response cybersecurity PHP 8.5.12 Fixes Critical Flaws That Could Let Hackers Take Over Servers Without Login - CyberPress cybersecurity High-Severity Flaws Exploited in Three Days as Ransomware Dominates Q3: Rapid7 - SecurityWeek cybersecurity ‘This Is Not a Drill’: Critical PHP Vulnerabilities Are Setting the Internet on Fire - Wired Security vulnerability PHP Remote Code Execution (“PHP2Shell” CVE-2026-109618 & CVE-2026-109619) - watchTowr Intelligence cybersecurity CVE-2026-109618 & CVE-2026-109619: Two Vulnerabilities Allow Unauthenticated RCE in PHP - OX Security cybersecurity PHP ships emergency patches for critical PHP2Shell flaws - BleepingComputer cybersecurity ClickFix has never been bigger, and AI tools are its most convincing lure yet - BleepingComputer cybersecurity PHP Issues Emergency Patches for Two Critical PHP2Shell RCE Flaws as Exploit Attempts Emerge - The Hacker News cybersecurity AI Guardrails Aren’t Stopping Criminal Hackers - Wired Security
1 / 15
All news ›
Cybersecurity

PHP 8.5.12 Fixes Critical Flaws That Could Let Hackers Take Over Servers Without Login

CyberPress ·

The PHP project has released fixes for a critical out-of-memory (OOM) memory-corruption flaw, tracked as CVE-2026-109618. It can give unauthenticated remote attackers code execution on vulnerable web servers. The advisory, GHSA-w8hw-w9fx-j79w, was published on October 21, 2026, and rates the bug 9.2 (Critical) under CVSS v4. PHP 8.5.12 security flaws According to the security advisory […] The post PHP 8.5.12 Fixes Critical Flaws That Could Let Hackers Take Over Servers Without Login appeared first on Cyber Security News .

Continue on CyberPress ↗ ‹ All news Get the newsletter

The summary and image come from CyberPress; the image is shown from their website.