Critical Threats Behind PHP: Dissecting Dangerous RCE Vulnerabilities (CVE-2026-109618 & CVE-2026-109619)
·4 mins·
loading
Recently, the web development ecosystem was shaken by the disclosure of two critical vulnerabilities with a CVSS score of 9.2 in the core of PHP. These vulnerabilities allow attackers to carry out full Remote Code Execution (RCE) server takeover and execute malicious code even without requiring any authentication.
