Laravel Tech Community
Oct 21, 2026 · Information Security
Critical PHP RCE Vulnerabilities CVE-2026-109618/19: Patch Immediately (CVSS 9.2)
PHP has released security updates for versions 8.5.12, 8.4.27, 8.3.36, and 8.2.35 to fix two critical unauthenticated remote code execution vulnerabilities (CVE-2026-109618 and CVE-2026-109619) rated CVSS 9.2, with mitigation steps for those unable to patch immediately.
CVE-2026-109618CVE-2026-109619CVSS 9.2
0 likes · 9 min read