#php

PHP to patch two critical remote code execution flaws, CVE-2026-109618 and CVE-2026-109619, at 14:00 UTC today as details leak

The PHP security team rates both bugs CVSS 9.2 and warns it may release early; security firms report early attacks and urge admins to prepare now.