Skip to content
PHP Vulnerabilities CVE-2026-109618 & CVE-2026-109619 Disclosed

PHP Vulnerabilities CVE-2026-109618 & CVE-2026-109619 Disclosed

First seen 22 Oct 2026, 01:38 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 22, 2026 at 02:38 UTC
  • •Two critical PHP vulnerabilities disclosed with CVSS scores of 9.2.
  • •CVE-2026-109618 and CVE-2026-109619 allow for potential arbitrary code execution.
  • •No patches are currently available, increasing the risk of exploitation.

On October 21, 2026, two vulnerabilities in PHP, CVE-2026-109618 and CVE-2026-109619, were published, both rated with a CVSS score of 9.2. These vulnerabilities could potentially allow attackers to execute arbitrary code, affecting a wide range of PHP applications. The vulnerabilities are currently, raising concerns about their exploitation in the wild. Security professionals are urged to monitor their systems for any signs of exploitation and to apply patches as soon as they become available. The exact scope of affected systems is still being assessed, but PHP is widely used in web development, meaning a large number of applications could be at risk. No specific attack methods have been reported yet, but the nature of these vulnerabilities necessitates immediate attention.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-21
CVE-2026-109618 & CVE-2026-109619 published
Two critical vulnerabilities in PHP were disclosed, both rated CVSS 9.2, allowing for arbitrary code execution.
Ox.Security

More articles in this cluster (2)

Following this threat?

Track CVE-2026-109618 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (3)

1 / 2

Common questions

What are the CVSS scores for these vulnerabilities?
Both CVE-2026-109618 and CVE-2026-109619 have a CVSS score of 9.2, indicating a critical severity.
Are there any patches available for these vulnerabilities?
No, as of now, there are no patches available for CVE-2026-109618 and CVE-2026-109619.
What should I do to protect my systems?
Monitor your systems for any signs of exploitation and apply patches as soon as they are released.