PHP: Upcoming Critical Security Release PHP’s security team has announced an upcoming release addressing two critical vulnerabilities

in #secpoint • 5 days ago

PHP: Upcoming Critical Security Release

PHP’s security team has announced an upcoming release addressing two critical vulnerabilities, each rated CVSS v4.0 9.2.

Public reporting identifies the issues as CVE-2026-109618 and CVE-2026-109619.

Technical details and affected-version information are scheduled for Wednesday, 21 October 2026 at 14:00 UTC.

PHP may release earlier if vulnerability details become public or active exploitation is detected.

Local release times:

Copenhagen / Stockholm: 16:00 CEST · London: 15:00 BST

New York: 10:00 EDT · San Francisco: 07:00 PDT

Dubai: 18:00 GST · Singapore: 22:00 SGT

SecPoint encourages organizations to review potentially affected systems, coordinate with hosting providers and prepare to apply the appropriate security updates promptly once available.

#PHP #CyberSecurity #CVE-2026-109619 #CVE-2026-109618 #SecPoint
secpoint-prerelease-CVE-2026-109618-CVE-2026-109619.png