Update to PHP 8.2.35, 8.3.36, 8.4.27 or 8.5.12—or a verified vendor-patched build.
On shared hosting? Ask your provider.
Guide: https://scohostings.com/php-security-update-cve-2026-109618-109619/
Security
🚨 Critical PHP security alert: CVE-2026-109618 & CVE-2026-109619 can allow remote code execution.
dev.to PHP0 views
Source：https://dev.to/scohostings/critical-php-security-alert-cve-2026-109618-cve-2026-109619-can-allow-remote-code-execution-5894
PreviousWhat Affiliate Networks Look For: Traffic and Page Rules Before You ApplyNextPHP2Shell: Turning a Session Upload-Progress UAF into Unauthenticated RCE (CVE-2026-109618 / CVE-2026-109619)
Related posts
Connecting AWS to Another Network with a Site-to-Site VPN
0dev.to AWS
CVE-2026-28328 and the Limits of Product-Fingerprint Exposure Data
0dev.to Security
Self-Employed? Solopreneur? NIST Has a Cybersecurity Guide Just for You
0Hacker News New
Apple’s HomeView may double as security camera – watch out Ring, Nest, and Wyze
0ZDNet
Future-proof security system protects Bitcoin Lightning Network from quantum attacks
0Phys.org Tech
CVE-2026-106074: a build-time randomness leak in Node.js snapshots
0dev.to Node