PHP: Upcoming Critical Security Release PHP’s security team has announced an upcoming release addressing two critical vulnerabilities
PHP: Upcoming Critical Security Release
PHP’s security team has announced an upcoming release addressing two critical vulnerabilities, each rated CVSS v4.0 9.2.
Public reporting identifies the issues as CVE-2026-109618 and CVE-2026-109619.
Technical details and affected-version information are scheduled for Wednesday, 21 October 2026 at 14:00 UTC.
PHP may release earlier if vulnerability details become public or active exploitation is detected.
Local release times:
Copenhagen / Stockholm: 16:00 CEST · London: 15:00 BST
New York: 10:00 EDT · San Francisco: 07:00 PDT
Dubai: 18:00 GST · Singapore: 22:00 SGT
SecPoint encourages organizations to review potentially affected systems, coordinate with hosting providers and prepare to apply the appropriate security updates promptly once available.
#PHP #CyberSecurity #CVE-2026-109619 #CVE-2026-109618 #SecPoint