SecurityThe Vergeabout 1 hour ago
PHP Vulnerabilities Exploited Days Before Patch
2 min read
Hackers exploited two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, days before a patch was released. Amazon Threat Intelligence found an exploit attempt on October 17th, while other attempts occurred on October 21st. The PHP Foundation delayed the fix due to backward compatibility breaks and denial-of-service potential.
Level
Hype check
Tap to vote and see what everyone thinks.
