Critical PHP security issue takes websites
Digest more
Crucial vulnerabilities in the PHP language is so severe that global authorities have recommended websites temporarily go offline until it can be fixed.
Two critical PHP remote code execution vulnerabilities will be patched in an emergency release on October 21. Fixes are only expected for supported PHP 8.x branches.Key takeawaysCVE-2026-109618 and CVE-2026-109619 are critical vulnerabilities in PHP,
Two flaws expose PHP web servers to remote attacks. Versions from the past 20 years are affected; admins should patch.