Covered by 2 sources — first reported by US-CERT / SANS Internet Storm Center, Oct 21, 12:31 UTC
Critical PHP Vulnerability (CVE-2026-109618, CVE-2026-109619) [infocon yellow], (Wed, Oct 21st)
Coverage
US-CERT / SANS Internet Storm Center
Critical PHP Vulnerability (CVE-2026-109618, CVE-2026-109619) [infocon yellow], (Wed, Oct 21st)
Palo Alto Unit 42
Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619