Get the latest tech news

PHP web runtimes (CVE-2026-109618 and CVE-2026-109619)


Bulletin ID: 2026-143-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/21/2026 14:30 PM PDT Summary: Two critical issues have been identified in PHP web runtimes (CVE-2026-109618 and CVE-2026-109619) that can allow an unauthenticated actor to run code on affected systems. A remote caller can send crafted web requests to affected PHP workers and execute arbitrary code, read process-accessible data, or cause denial of service.

None

Get the Android app

Or read this on Hacker News

Read more on:

Photo of php

php

Photo of cve-2026

cve-2026

Photo of PHP web runtimes

PHP web runtimes

Related news:

News photo

Government websites in the EU and Canada taken offline over PHP vulnerability

News photo

PHP: The three letters that shut down sites all over the internet today

News photo

Potential third critical PHP CVE