PHP prepares emergency patches for two critical flaws rated 9.2 severity
The PHP maintenance team announced emergency patches for two vulnerabilities rated 9.2 out of 10 severity, after details of an alleged exploit leaked. Security firm watchTowr confirmed the flaws, tracked as CVE-2026-109618 and CVE-2026-109619, are real and described them as remote code execution affecting PHP versions 5, 6, 7 and 8. The advisory urges users to prepare to update as soon as the release is available.
In 35 seconds
- PHP will release emergency patches for two vulnerabilities rated 9.2 out of 10 severity.
- watchTowr confirmed flaws CVE-2026-109618 and CVE-2026-109619 and described them as remote code execution.
- The issue would affect PHP versions 5, 6, 7 and 8, according to the security firm.
IASummary generated by artificial intelligence from a story by El Ecosistema Startup. It may contain errors: the original source prevails.




Comments
Be respectful. Comments reported by several people are hidden until a moderator reviews them.
You do not need an account to read, only to comment. Sign in with a code sent to your email or with your Google account. We only show the name you choose, never your email.