🇨🇿 Czech, 21 October 2026, PHP Security
Two Critical Vulnerabilities Exposed by Artificial Intelligence
Security experts have identified two critical vulnerabilities in PHP, a programming language used by millions of websites, which can allow attackers to execute code remotely.
The vulnerabilities, identified as CVE-2026-109618 and CVE-2026-109619, have a severity rating of 9.2 out of 10 and can allow attackers to execute code remotely without authentication.
The issues arise when PHP encounters a memory limit at an inopportune moment, leaving internal data partially prepared, or when processing a severe programming error, leaving a reference to memory that has already been released.
Attackers can exploit these vulnerabilities to gain access to sensitive data, modify website content, or use the compromised server for further attacks, even without knowing the administrator’s password or having a user account.