Taste The Code

Critical PHP Vulnerabilities CVE-2026-109618 and CVE-2026-109619: What They Are and How to Protect Your Server

If you run a website built on PHP, today is a day to drop what you are doing and check your servers. Two critical vulnerabilities were disclosed in PHP, tracked as CVE-2026-109618 and CVE-2026-109619, and together they can allow an attacker to run their own code on your server without logging in.

Oct 21, 2026 — 10 mins read