Covered by 2 sources — first reported by Palo Alto Unit 42, Oct 21, 13:40 UTC
Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619
Coverage
Palo Alto Unit 42
Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619
US-CERT / SANS Internet Storm Center
Critical PHP Vulnerability (CVE-2026-109618, CVE-2026-109619) [infocon yellow], (Wed, Oct 21st)