PHP fixes two critical vulnerabilities as websites face attack risk
Developers of the PHP programming language have released security updates to fix two critical vulnerabilities, urging users to update immediately as website operators work to protect their systems. Government websites in Europe and elsewhere went offline on Wednesday following the disclosure of the vulnerabilities which reported that website operators were scrambling to secure their systems,…
PHP developers have released security updates addressing two critical vulnerabilities, urging users to update their systems immediately to protect against potential attacks. These vulnerabilities, CVE-2026-109618 and CVE-2026-109619, have the potential to cause memory corruption and allow attackers to execute code without authentication.
The vulnerabilities affect all PHP installations serving web requests, including PHP-FPM, Apache with mod_php, php-cgi, FrankenPHP, and LiteSpeed. The PHP Foundation announced that security updates would be released on October 21, 2026, at 14:00 UTC, and urged users to prepare for the update, with the possibility of an earlier release if technical details or evidence of an active exploit emerged.
Brief written by urgent.news from Gulf News's own syndicated text. Machine-written — may contain errors; check the original before relying on it.
