CVE-2926-109618

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

October 20, 2026

Last Seen

October 21, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical PHP Vulnerabilities CVE-2026-109618 and CVE-2026-109619 Prompt Emergency Patching71.3

On October 21, 2026, the PHP security team is set to release emergency patches for two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, both rated 9.2 on the CVSS v4.0 scale. These vulnerabilities, identified as remote code execution (RCE) flaws, could allow attackers to execute arbitr...