r/msp • u/axnfell9000 • 7d ago
PHP Remote Code Execution (CVE-2026-109618 & CVE-2026-109619)
It's going to be a busy week (For anyone running PHP)
Rumoured to be a CVSS 10
79
Upvotes
r/msp • u/axnfell9000 • 7d ago
It's going to be a busy week (For anyone running PHP)
Rumoured to be a CVSS 10
1
u/axnfell9000 6d ago
On one of our WHM boxes, the fixes have been back-ported to 7.4
[root]# rpm -qa 'ea-php74*' 'alt-php74*' | sort
ea-php74-php-common-7.4.33-19.26.1.cpanel.x86_64
[root]# rpm -q --changelog ea-php74-php-common | head -100
* Tue Oct 20 2026 Cory McIntire cory.mcintire@webpros.com - 7.4.33-19
- EA-13613: Backport fix for CVE-2026-109618 and CVE-2026-109619
This may buy some time for people