Two PHP CVEs incoming, warning that '70.2% of the internet' will be scrambling
JiliJeanlouis · x · 2026-10-21
Security account SeguInfo is teasing two upcoming PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, warning that sysadmins running PHP are in for 'long days' once disclosure lands. Details and an FAQ page are still being finalized, so PHP users should watch for official patches.
Related event: PHP Core Hit by CVSS 10.0 RCE Flaws, Emergency Patch Set for October 21(8 posts)→
More from Safety
- After TikTok child-safety alarms, a NeurIPS paper proposes TRACE to evaluate youth restrictions — Stefania_druga · 2026-10-21
- PHP RCE proof-of-concept confirmed working, exploitation not trivial but concerning — realmrfakename · 2026-10-21
- Kevin Kelly urges support for Wayback Machine against publishers — Scobleizer · 2026-10-21
- Opinion: GitHub and AI Labs Should Own Scanning and Remediation of Abandoned Widely-Used Libraries — JiliJeanlouis · 2026-10-21
- Nintendo strikes 9 AI-modded game videos, including a 1.2M-view Pokémon Snap — AIandDesign · 2026-10-21
- TiDB leak report: root-level org takeover bug left unfixed for 4 years, creds in Jira — arpit_bhayani · 2026-10-21