SecuritySchneier on Securityabout 1 hour ago
PHP Maintainers Patch Two Critical RCE Bugs
1 min read
PHP maintainers released patches for versions 8.5.12, 8.4.27, 8.3.36 and 8.2.35 to fix two critical vulnerabilities allowing unauthenticated remote code execution. The fixes address CVE-2026-109618 and CVE-2026-109619, affecting all installations serving web requests including Apache and LiteSpeed. Experts urge immediate updates as the risk is highest for modphp configurations.
Level
Hype check
Tap to vote and see what everyone thinks.
