⤷ Title: PHP Releases Fixes and Full Details for Two Critical Unauthenticated RCE Flaws
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 14:17:12 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_109618 #CVE_2026_109619 #mod_php #php #PHP_FPM #Remote Code Execution #Web Security
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 14:17:12 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_109618 #CVE_2026_109619 #mod_php #php #PHP_FPM #Remote Code Execution #Web Security
Daily CyberSecurity
PHP Releases Fixes and Full Details for Two Critical Unauthenticated RCE Flaws
TL;DR On October 21, 2026, the PHP team released PHP 8.2.35, 8.3.36, 8.4.27 and 8.5.12 to fix two critical PHP RCE vulnerabilities. Both CVE-2026-109618 and CVE-2026-109619 score CVSS v4.0 9.2 and…