PHP CVE-2026-109618 and CVE-2026-109619: How to Check, Patch and Protect Your Server
Introduction On 21 October 2026 the PHP project released emergency security updates for two critical flaws, tracked as CVE-2026-109618 and CVE-2026-109619. Each one is rated 9.2 out of 10 under CVSS v4.0, and each can let an attacker on the…