Somebody has leaked CVE-2026-109618 and CVE-2026-109619 in PHP before the patch is out.
2 Boosts
0 Likes
Install Fedizen
Get the full app experience
1
Tap
Share
2
Add to Home Screen
PHP releasing patches tomorrow for CVE-2026-109618 and CVE-2026-109619
Fixed versions will be 8.5.12, 8.4.27, 8.3.36, 8.2.35
All others are end-of-life but are still vulnerable - the vulns date back to versions from 2004 onwards.
https://www.php.net/archive/2026.php#2026-10-20-1
PHP: News Archive - 2026