PHP Foundation's Overview of CVE-2026-109618 and CVE-2026-109619
The PHP Foundation released an analysis of two recent security flaws, identified as CVE‑2026‑109618 and CVE‑2026‑109619. Both vulnerabilities affect the core interpreter, allowing remote code execution under certain conditions. The foundation detailed the technical cause, potential impact on affected installations, and recommended mitigation steps, including applying the forthcoming patch and updating to the latest PHP release.