PHP CVE-2026-109618 & CVE-2026-109619: What to Do Before the Details Drop
Uncertainty creates ample room for speculation and malicious activity. Essential dos and don’ts until the official patch drops. Two critical PHP core vulnerabilities, CVE-2026-109618 and CVE-2026-109619, are set to be patched today. The PHP security team rates both CVSS v4.0 9.2, and researchers describe them as unauthenticated remote code execution. Beyond that, there’s very little […] The post PHP CVE-2026-109618 & CVE-2026-109619: What to Do Before the Details Drop appeared first on OX Security .
Continue on OX Security ↗ ‹ All news Get the newsletter
The summary and image come from OX Security; the image is shown from their website.