Government websites across Europe went dark on Wednesday as operators raced to patch two critical vulnerabilities in PHP, one ...

PHP2Shell vulnerabilities CVE-2026-109618 and CVE-2026-109619 allow unauthenticated code execution on PHP servers; patch to 8.2.35 or later now.

Two critical bugs in PHP, the language running most of the web, let strangers take over servers without a password. The patch ...

PHP patches two critical RCE flaws affecting web servers as Cloudflare reports early exploit attempts, with no confirmed ...

Two critical remote code execution (RCE) flaws dubbed "PHP2Shell" have hit the core PHP programming language, triggering ...

PHP released emergency patches today fixing two critical remote code execution vulnerabilities rated CVSS v4.0 9.2, affecting every web server running PHP 5.4 or later — a population spanning an ...

The developers of the widely used PHP programming language said on Wednesday they would release patches for two critical ...

Two critical vulnerabilities have been identified with PHP, a programming language which is widely used across the internet.

CVE-2026-109618 and CVE-2026-109619: watchTowr confirms leaked CVSS 10 PHP RCE zero-days. Patches due October 22; only PHP 8 ...

Today, I received several similar questions from our existing clients."I saw the news about the PHP vulnerability, but is my ...

Don't stop at 'The patch comes out at 11 PM.' What WordPress and Moodle administrators need to checkOn October 21, 2026, an ...

Websites and services ranging from Spotify to WordPress are all at risk thanks to a massive PHP security breach ...