Wu BlockchainNewsroom
PHP critical RCE bugs CVE-2026-109618 and 109619 trigger security alert

SlowMist reports two critical PHP remote code execution vulnerabilities (CVE-2026-109618, CVE-2026-109619, CVSS 9.2) and urges crypto exchanges, DeFi platforms, and wallets to assess exposure. PHP patches were released Oct 21 for versions 8.5.12, 8.4.27, 8.3.36, and 8.2.35.