21CTO

Oct 22, 2026 · Information Security

Critical PHP Vulnerabilities (CVE-2026-109618/19) Trigger Global Outages; AI-Assisted Discovery, Emergency Patches Released

Two critical PHP vulnerabilities in memory management and error handling allow unauthenticated remote code execution, affecting ~70% of websites; emergency patches for PHP 8.2-8.5 released after AI-assisted discovery and early exploitation, with CVSS 9.2 scoring.