CVE-2026-109619

Everything Shell Bulletin has reported about CVE-2026-109619: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

Isolate Unpatched PHP Servers Now: Critical Remote Code Execution Flaws CVE-2026-109618 and 109619 Patched

Attackers can execute code remotely on unpatched PHP servers via two critical flaws. Patches are available for supported versions; isolate systems if you cannot update immediately.

Oct 22, 2026

Vulnerabilities

Patch PHP servers now to block remote code execution via two severe flaws

Maintainers warn of imminent fixes for two 9.2-rated vulnerabilities after an exploit tool leak, urging immediate preparation for updates.

Oct 21, 2026