Critical PHP Security Update: Action Required for Self-Managed Servers
The PHP project released security updates on 21 October 2026 fixing two critical, unauthenticated remote code execution vulnerabilities (CVE-2026-109618 and CVE-2026-109619), both rated CVSS 9.2. If you run a self-managed (unmanaged) cloud or VPS server, or...
