Initially published Oct 21st at 6 AM PT- last updated 8:40AM PT Patch Now: Ensure you are up to date with the latest version and use this link to patch now: CPAI-2026-15172 – Check Point Software. PHP Remote Code Execution (CVE-2026-109618, CVE-2026-109619). Check Point WAF protects against this threat What happened? On October 20, a post on Hacker News claimed that two critical remote code execution (RCE) vulnerabilities in PHP – tracked by researchers as CVE-2026-109618 and CVE-2026-109619 – would be publicly disclosed on Thursday, October 22, before any patch was available.
This article has been indexed from Check Point Blog