Skip to content
Sign in
DevelopingReported 2026-10-21 14:14

PHP Security Team Releases Critical Security Update to Fix Two High-Risk Vulnerabilities

The PHP Security Team will release a security update on October 21 at 14:00 to fix two critical vulnerabilities with a CVSS score of 9.2, CVE-2026-109618 and CVE-2026-109619.

In depthRead the in-depth story

Why it matters. Website administrators, cloud service providers, and enterprise operations teams need to promptly confirm and upgrade the PHP version to address potential security threats.

01

Who and what it touches

WordPressusesDrupalusesApache 2usesDrupalusesJoomlausesWebsitesenablesMagentoenablesmemoryusesPHP

Into PHP

From PHP

Each line is a relation with evidence behind it, drawn in the direction it points. A line shows that two things are connected, not how far this change reaches.

02

Evidence

  • IIT之家Media2026-10-21 14:14
    View source
  • IiThome(台灣)Media2026-10-21 15:40
    View source