Who’s Patching PHP’s Two 9.2-Severity Vulnerabilities?
CVE-2026-109618 and CVE-2026-109619 are disclosed as unauthenticated remote code execution (RCE) vulnerabilities, scoring 9.2 on CVSS 4.0. They affect all PHP versions from 8.2 to 8.5, requiring urgent upgrade to the designated patched versions.
To save bandwidth, the page loads only the poster; the playback source connects when you click.
Chapters
- 钩子
- 漏洞定性
- 影响范围
- 谁在行动
- 谁在等待
- 普通人能做什么
- CTA
CVE-2026-109618 and CVE-2026-109619 are disclosed as unauthenticated remote code execution (RCE) vulnerabilities, scoring 9.2 on CVSS 4.0. They affect all PHP versions from 8.2 to 8.5, requiring urgent upgrade to the designated patched versions.
First, follow these steps to audit and upgrade your system. If you’re unfamiliar with checking your PHP version, performing backups, or server operations, DM me with your environment details—we offer paid remote remediation support.
Sources
- 正面硬刚DeepSeek！MiniMax M3.1 Flash发布，输出卷到200+TPS，价格砍到1/2 — finance.sina.com.cn
- DeepSeek V4.1 Flash新版本发布 许愿式编程一键成真 网友怒赞：太上进 ... — news.qq.com
- DeepSeek V4.1 Flash-1017版正式发布 — news.qq.com
- DeepSeek上新AI模型部分性能超OpenAI，V4.1-Flash几乎每周位居使用量榜首 — www.caiwennews.com
- DeepSeek发布新模型 称成为新的最优性价比模型 — www.caixin.com
- DeepSeek V4.1-Flash-1017发布：性能提升与费用降低的双重利好｜#游戏资讯 ... — www.sohu.com
