{
  "id": 15911417,
  "title": "PHP fixes two critical vulnerabilities as websites face attack risk",
  "url": "https://urgent.news/2026/10/21/php-fixes-two-critical-vulnerabilities-as-websites-face-attack-risk",
  "topic": "world",
  "section": "World",
  "published": "2026-10-21T15:59:19.000Z",
  "source": {
    "name": "Gulf News",
    "slug": "gulf-news",
    "url": "https://gulfnews.com/technology/php-fixes-two-critical-vulnerabilities-as-websites-face-attack-risk-1.500718855"
  },
  "original_language": "en",
  "account": null,
  "summary": "PHP developers have released security updates addressing two critical vulnerabilities, urging users to update their systems immediately to protect against potential attacks. These vulnerabilities, CVE-2026-109618 and CVE-2026-109619, have the potential to cause memory corruption and allow attackers to execute code without authentication. The vulnerabilities affect all PHP installations serving web requests, including PHP-FPM, Apache with mod_php, php-cgi, FrankenPHP, and LiteSpeed. The PHP Foundation announced that security updates would be released on October 21, 2026, at 14:00 UTC, and urged users to prepare for the update, with the possibility of an earlier release if technical details or evidence of an active exploit emerged.",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}