Developing4 outlets · over 1 hour
PHP Maintainers Release Emergency Patches
On October 21 at 2:00 p.m. UTC, PHP maintainers released emergency patches for CVE-2026-109618 and CVE-2026-109619. The flaws affect versions 5 through 8, impacting an estimated 1.3 million hosts. Experts warn attackers could exploit these within 15 minutes, prompting some government sites to go offline.
The story so far2 updates, latest first.
Tracked by ByteBrief