Unverified
Gathered automatically from the outlets below; our newsroom hasn't checked it yet.
Critical Vulnerabilities in PHP Require Immediate Patching
CISA strongly urges organizations to immediately patch the recently disclosed critical vulnerabilities in PHP, CVE-2026-109618 and CVE-2026-109619. These vulnerabilities, known as “php2shell,” allow…
What's new
- CISA Advisories is now reporting this
- New headline Was: “PHP ships fixes for two critical engine flaws that allow remote code execution”
- Matthew Prince (@eastdakota), Cloudflare CEO (X post) and The Korea Herald are now reporting this
- Our desk updated its story
- Rappler (Reuters) and CNA (Reuters) are now reporting this
15 earlier updates
- Rappler is now reporting this
- France 24 is now reporting this
- Bangkok Post (AFP) is now reporting this
- Bangkok Post is now reporting this
- Our desk updated its story
- Sanae Takaichi (@takaichi_sanae), Prime Minister of Japan (X post) is now reporting this
- Our desk updated its story
- BBC is now reporting this
- Daily Maverick is now reporting this
- AWS Security Blog (Amazon Threat Intelligence) is now reporting this
- Our desk filed its story
- thephp.foundation is now reporting this
- New headline Was: “PHP ships fixes for two critical engine flaws that allow remote code execution”
- MercoPress and DW are now reporting this
- The Conversation AU is now reporting this
