WORLDTECHCybersecurity
Critical security flaws in PHP Require Immediate Patching
CISA strongly urges organizations to immediately patch the recently disclosed critical vulnerabilities in PHP, CVE-2026-109618 (the public catalogue number for a specific software flaw) and CVE-2026-109619. While CISA has not observed exploitation of these vulnerabilities as of the time of publication, they pose a risk to organizations if left unpatched. Alert Critical Vulnerabilities in PHP Require Immediate Patching Release Date October 21, 2026 CISA strongly urges organizations to immediately patch the recently disclosed critical vulnerabilities in PHP, CVE-2026-109618 and CVE-2026-109619.
