SecurityTechCrunchabout 2 hours ago
PHP Bugs Force Millions to Patch Servers
9 min read
Two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, allowed unauthenticated remote access to 70% of the web. The PHP Foundation released patches on Wednesday, yet Amazon detected exploitation as early as October 17. While banks and hospitals temporarily shut down services, confirmed compromises were already active by late Friday.
Level
Hype check
Tap to vote and see what everyone thinks.
