CVE-2026-109619
Critical PHP flaws allow remote code execution; DigitalOcean urges patching
Two critical remote code execution vulnerabilities in PHP, tracked as CVE-2026-109618 and CVE-2026-109619, were publicly disclosed on October 21, 2026. DigitalOcean says…
php2shell: Two Critical PHP RCE Bugs Patched, Finding Every Runtime Is Hard
PHP has released 8.5.12, 8.4.27, 8.3.36 and 8.2.35 to fix two unauthenticated remote code execution bugs, CVE-2026-109618 and CVE-2026-109619, both rated CVSS v4 9.2.…