Crypto security chiefs sound alarm as PHP emergency patch scrambles devs worldwide

T2Covered by 1 source · first reported by The Defiant / DL News / Protos / CryptoSlate at 21 Oct, 17:00 UTC

PHP released fixes on Oct. 21 for two critical vulnerabilities that can let unauthenticated attackers run code on web servers, as crypto security executives urged operators to patch and check overlooked infrastructure. The PHP team's security advisory identifies CVE-2026-109618 and CVE-2026-109619…

cryptoreleasessecurity

Sources

• T2Crypto security chiefs sound alarm as PHP emergency patch scrambles devs worldwideThe Defiant / DL News / Protos / CryptoSlate21 Oct, 17:00

Vulnerabilities

• CVE-2026-109618
• CVE-2026-109619