PHP Fixes Two Critical RCE Vulnerabilities Allowing Unauthenticated Code Execution

PHP released emergency security updates to address two critical vulnerabilities that could allow unauthenticated attackers to execute code on vulnerable servers. These vulnerabilities are tracked as CVE-2026-109618 and CVE-2026-109619, and both have a CVSS v4.0 score of 9.2. The fixes are included in PHP versions 8.5.12, 8.4.27, 8.3.36, and 8.2.35. Administrators should update immediately, as […]

This article has been indexed from GBHackers Security | #1 Globally Trusted Cyber Security News Platform