Vulnerabilities
PHP Users Must Patch Two Critical RCE Flaws by October 21
Patches for unauthenticated remote code execution in PHP are scheduled for release later this week.
CVE-2026-109618
Everything Patch Observer has reported about CVE-2026-109618: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Organisations urged to patch PHP 5-8 ahead of Oct 21 fixes after critical RCE flaws leak early
The PHP team warns of imminent updates for two critical vulnerabilities after details leaked ahead of the scheduled October 21 disclosure.