Urgent.News

What's breaking now, across thousands of outlets.

Tech

Cloudflare says it deployed WAF mitigations for all free and paid tier customers to combat two PHP flaws by default, about nine hours ahead of public disclosure (Cloudflare)

Today, Calif.io, Wiz, OpenAI and Quarkslab disclosed two vulnerabilities in PHP, tracked as CVE-2026-109618 and CVE-2026-109619 and known as php2shell.

We haven't written up this one. Techmeme has the full story — the link below goes straight to it.

Read the original at blog.cloudflare.com →

More in Tech

More from Wednesday 21 October →