New since your last visit
The summary is not available in this language yet. Original sources remain available below.
In brief
- CVE-2026-109618 and CVE-2026-109619: PHP will patch leaked critical flaws on October 21 at 14:00 UTC.
- Both are rated CVSS v4.0 9.2.
Sources
2 languages9 sources
This brief brings together multiple sources and is presented in this edition language. Source language: EN.
Telekom SecurityEN · Security advisory · 8 d agoHoneypot Observations on PHP Vulnerabilities CVE-2026-109618 and CVE-2026-109619 (php2shell)Read original ↗Sucuri BlogEN · Security advisory · 8 d agoCritical PHP Security Update: Two RCE Flaws (CVE-2026-109618, CVE-2026-109619)Read original ↗Vulners.com RSS FeedEN · Security advisory · 8 d agoExploit for CVE-2026-109618Read original ↗微步在线研究响应中心EN · Security advisory · 8 d ago已复现 | php2shell:PHP Core 远程代码执行漏洞(CVE-2026-109618/109619)Read original ↗
View all sources · 9
Ubuntu BlogEN · php2shell (CVE-2026-109618 and CVE-2026-109619) – PHP critical vulnerability fixes availablePalo Alto Unit 42EN · Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619unSafe.sh - 不安全EN · Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619Tenable BlogEN · php2shell (CVE-2026-109618, CVE-2026-109619): Frequently asked questions about critical PHP remote code execution vulnerabilitiesCyber KendraEN · PHP RCE Zero-Days CVE-2026-109618, CVE-2026-109619 Leak Early