Technology / NEWS UPDATE
PHP warns it plans to release 2 emergency patches imminently
Published · 1 min read
PHP plans to release emergency patches for two severe vulnerabilities with severity ratings of 9.2 out of 10, scheduled for release in over 12 hours.
The vulnerabilities, tracked as CVE-2026-109618 and CVE-2026-109619, are believed to affect every PHP version from 2004 onward. Security firms warn of potential mass attacks and urge website administrators to prepare by identifying PHP management roles, inventorying PHP-based applications, and backing up files. PHP maintainers reserve the right to release the patches earlier if necessary.