Promote Sign in Sign up

中文 English Français Русский Español العربية

Tell HN: 2x PHP RCE CVEs with CVSS 10.0 Incoming

Hacker News Ask2026-10-20 23:200 views

Tell HN: 2x PHP RCE CVEs with CVSS 10.0 Incoming

A reliable source has indicated an announcement is scheduled for 22 October 2026 at 18:00 CEST regarding 2x PHP RCEs with a CVSS score of 10.0.

I have no additional evidence to back this up beyond "source: trust me, bro", but if you're running PHP in production it would be prudent to be ready to update as a matter of priority. These CVEs reportedly relate to remote code execution in all affected PHP versions from PHP 5 onwards.

These are the two reserved CVEs for the reported upcoming announcement:

CVE-2026-109618

CVE-2026-109619

Comments URL: https://news.ycombinator.com/item?id=50167754

Points: 1

# Comments: 0

Source：https://news.ycombinator.com/item?id=50167754

PreviousAsk HN: Is there a credible gut health test out there?NextAsk HN: Can LeetCode (or similar) keep critical thinking sharp in the AI era?

Related posts

FiveM Script Database Migrations: What to Check Before You Install

FiveM Script Database Migrations: What to Check Before You Install

Most FiveM script problems that show up a week after the install are not script bugs. They are database problems, and th

The insurance edge case that breaks event-driven policy pipelines

The insurance edge case that breaks event-driven policy pipelines

If you're moving insurance policy data from a nightly batch to an event stream, the broker is the easy part. The hard pa

The fix for an empty state isn't filling it

The fix for an empty state isn't filling it

Last week I posted on Indie Hackers about a decision in my renovation cost tool: it ships with an empty price book. The

Five Things That Make Dependabot Painful for Terraform

Five Things That Make Dependabot Painful for Terraform

A Terraform block in dependabot.yml looks identical to an npm or uv one: - package-ecosystem : terraform directory : /te

Tracking Roblox player counts: what the public data actually gives you

Tracking Roblox player counts: what the public data actually gives you

Roblox does not publish a public API for per-game concurrent player counts, so anything you see is a sample. I have been

Telegram gold signals this week: results to Oct 30

From October 24 to October 30, we executed 3,629 signals from 405 Telegram gold channels at the broker. More channels ma