Hacking News
FBI Urges Immediate Patching of Two Critical PHP Vulnerabilities
The FBI urged organizations to promptly patch PHP systems following the October 21 release of fixes for two critical vulnerabilities. These flaws, identified as CVE-2026-109618 and CVE-2026-109619, could allow attackers to execute code remotely in PHP's core, potentially breaching private data and networks. The bureau recommended keeping affected systems offline until the risk could be fully mitigated if an immediate update wasn’t possible.