On October 21, 2026, the PHP project disclosed two critical vulnerabilities that can allow unauthenticated remote code execution on affected web servers. Both vulnerabilities received a CVSS v4.0 score of 9.2.  CVE-2026-109618  CVE-2026-109619  Pagely deployed initial mitigations while preparing updated… Continue Reading →