Back to article

Critical PHP vulnerabilities: Update your servers now!

· Jan Gebser · 1 min read

 DomainGang.com: Two critical PHP vulnerabilities disclosed on October 21, 2026, have triggered urgent security updates for web servers worldwide. Identified as CVE-2026-109618 and CVE-2026-109619, the flaws carry a severity rating of 9.2 out of 10 and could allow attackers to execute malicious code without authentication. The vulnerabilities affect ...