Skip to content
securitytabs

Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619 (Updated October 29)

Palo Alto Unit 42Vulnerabilities

CVE-2026-109618 and CVE-2026-109619 are Critical vulnerabilities in PHP, a scripting language used globally for web servers and CMS systems. The post Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619 (Updated October 29) appeared first on Unit 42 .

Summary from Palo Alto Unit 42.

Read the full article at Palo Alto Unit 42
Full story2 outlets are covering this story. Read the summary and every outlet's coverage SecurityTabs reportupdated just nowPHP2Shell: Two Critical PHP Flaws Under Active Attack

Explained

The technology and terms in this story. Learn more

Why it was possible

The weaknesses behind this story's CVEs, from each CVE Record.

Vulnerabilities in this story

Severity and exploitation facts from NVD, FIRST, and CISA.

Related coverage

Other sources covering the same vulnerabilities or event.

More in Vulnerabilities