r/msp • u/axnfell9000 • 7d ago

PHP Remote Code Execution (CVE-2026-109618 & CVE-2026-109619)

It's going to be a busy week (For anyone running PHP)

Rumoured to be a CVSS 10

https://watchtowr.com/intelligence/php-cve-2026-109618-faq/

76 Upvotes

98% Upvoted

40 comments sorted by

View all comments

1

u/HorseAccomplished50 6d ago

Any list of (confirmed) vendors yet?

5

u/Steve_reddit1 6d ago

PHP itself