Threat advisoriesCritical
Critical PHP flaws CVE-2026-109618 and CVE-2026-109619: prepare for the patch
PHP.net has announced a critical update. SANS ISC raised its InfoCon level to yellow, citing PHP's wide use, an expected CVSS score of 9.4 and early proof-of-concept exploits circulating before the patch.
