News
PHP Patches Critical Flaws
PHP has released fixes for two critical security flaws rated 9.2, which can allow unauthenticated attackers to run code remotely. The security advisory identifies CVE-2026-109618 and CVE-2026-109619, both with a critical CVSS v4.0 severity score of 9.2 out of 10. The vulnerabilities affect PHP installations serving web requests, with the highest risk in Apache's mod_php. Senior security officials at Kraken and Ledger warn of the risks these vulnerabilities pose to cryptocurrency businesses and their infrastructure.