PHP

Everything Shell Bulletin has reported about PHP: 3 stories, newest first. Part of our Vulnerabilities coverage.

Isolate Unpatched PHP Servers Now: Critical Remote Code Execution Flaws CVE-2026-109618 and 109619 Patched

Attackers can execute code remotely on unpatched PHP servers via two critical flaws. Patches are available for supported versions; isolate systems if you cannot update immediately.

Oct 22, 2026

Vulnerabilities

Patch PHP servers now to block remote code execution via two severe flaws

Maintainers warn of imminent fixes for two 9.2-rated vulnerabilities after an exploit tool leak, urging immediate preparation for updates.

Oct 21, 2026

Vulnerabilities

Prepare PHP Systems for October 21 Critical Security Patch Release

The PHP team will release a critical update on October 21 fixing two severe flaws rated 9.2, requiring attention from web hosting providers.

Oct 21, 2026