Technology
PHP Team Releases Fixes for Two Critical RCE Vulnerabilities
The Indian Express2h
THE BRIEF
1
The PHP team released fixes for two critical remote code execution vulnerabilities, tracked as CVE-2026-109618 and CVE-2026-109619, and urged immediate updates.
2
The Indian Computer Emergency Response Team issued a critical-severity advisory warning that the flaws could allow remote attackers to execute malicious code.
3
The vulnerabilities involve out-of-memory corruption and stale global state, and were rated 9.2 out of 10 under the CVSS version 4.0 severity scoring system.