According to the National Cyber Security Notification Center, PHP recently revealed two serious security flaws. The vulnerability numbers are CVE-2026-109618 and CVE-2026-109619. This vulnerability can cause an unauthenticated remote attacker to obtain server control by sending a specially crafted POST request, triggering memory corruption and ultimately enabling remote code execution. The vulnerability affects PHP 8.5.x<8.5.12, PHP 8.4.x<8.4.27, PHP 8.3.x<8.3.36, PHP 8.2.x<8.2.35, and 8.1 and earlier. Due to the serious harm of the vulnerability, websites in many countries have gone offline urgently on a large scale. As an open source programming language, PHP is widely used in the development of website platforms such as WordPress, Drupal, Joomla, and Magento. Currently, PHP has officially released the latest version to fix this vulnerability. For details, affected users are advised to promptly update to the secure version to eliminate potential security risks and strictly prevent cyber attacks.

Disclaimer:Webull uses external vendor Google Translation Service for news translations where we endeavour to ensure these are correct, however, we recommend that you please double-check this information accordingly. Webull is not responsible for translation errors or issues.