Vulnerabilities
PHP Patches Two Unconfirmed 9.2 RCE Flaws in Oct 21 Update for 8.2-8.5 Branches
PHP issues an out-of-cycle update on October 21 to address two unconfirmed critical remote code execution vulnerabilities.
CVE-2026-109618
Everything Patch Herald has reported about CVE-2026-109618: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
9.2-CVSS RCE flaws in PHP 5-8 force urgent patching before Oct 21 leak deadline
Administrators must prepare for urgent updates to PHP versions 5 through 8 after details of two severe remote code execution vulnerabilities leaked early.