CERT24Two critical vulnerabilities identified in PHPLoading data…
CERT24Threat Observatory
Period

Two critical vulnerabilities identified in PHP

Two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, were identified in PHP. Both have a CVSS v4.0 severity score of 9.2/10. Based on currently available information, an unauthenticated attacker may be able to execute commands on a vulnerable system.

← Back to intelligence

Two critical vulnerabilities identified in PHP

Two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, were identified in PHP. Both have a CVSS v4.0 severity score of 9.2/10. Based on currently available information, an unauthenticated attacker may be able to execute commands on a vulnerable system.