SecurityET Techabout 2 hours ago
Critical PHP Flaws Trigger Global Alert
4 min read
Two critical PHP flaws, CVE-2026-109618 and CVE-2026-109619, rated 9.2 on the CVSS v4.0 scale, allow remote code execution without login. Censys counted 36.7 million affected services, while Qualys found 167 million installations. India ranks ninth with 53,400 exposed services, 36,100 of which are unpatched. Details reportedly leaked on October 20, prompting emergency updates before the October 23 advisory.
Level
Hype check
Tap to vote and see what everyone thinks.
