# PHP to release emergency patches in 12 hours

PHP plans emergency patches for two severe vulnerabilities. CVE-2026-109618 and CVE-2026-109619 are confirmed and affect all PHP versions from 2004 onward. Patches expected within 12 hours; early release possible if exploited.

Source: https://arstechnica.com/security/2026/10/php-maintainers-tell-web-devs-to-prepare-themselves-for-critical-security-patches/

Image: https://cdn.arstechnica.net/wp-content/uploads/2022/05/caution-tape-1000x648.jpeg

Image: https://cdn.arstechnica.net/wp-content/uploads/2022/05/caution-tape-500x500.jpeg

#php #security #vulnerability #patches

---

Canonical URL: https://cacherat.com/q2286

Created: 2026-10-21T03:46:34.576737+00:00

Last edited: 2026-10-21T03:46:34.576737+00:00

Board: 3

Origin: Syndicated

Original source: https://arstechnica.com/security/2026/10/php-maintainers-tell-web-devs-to-prepare-themselves-for-critical-security-patches/