Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619

Palo Alto Unit 42October 21, 2026Vulnerabilities

CVE-2026-109618 and CVE-2026-109619 are Critical vulnerabilities in PHP, a scripting language used globally for web servers and CMS systems. The post Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619 appeared first on Unit 42 .

Summary from Palo Alto Unit 42.

Read the full article at Palo Alto Unit 42

Vulnerabilities in this story

Severity and exploitation facts from NVD, FIRST, and CISA.

Other sources covering the same vulnerabilities or event.

More in Vulnerabilities

High-Severity Flaws Exploited in Three Days as Ransomware Dominates Q3: Rapid7

SecurityWeekjust nowEndpointVulnerabilities

Hundreds of websites taken offline as concern grows over two PHP vulnerabilities

The Recordjust nowVulnerabilities

“Next Exploit Opportunities”: How a Threat Actor Used AI to Help Plan and Execute Multiple Types of Cybercrime Activities

Palo Alto Unit 421h agoThreat IntelVulnerabilitiesAI

Q3 2026 Threat Update: Attackers Are Exploiting Vulnerabilities Within 3 Days

Rapid7 Blog2h agoVulnerabilities

Memory Bugs Account for Most of Chrome’s 353 New Security Fixes

SecurityWeek2h agoVulnerabilities