hxxps://www.php[.]net/archive/2026.php#2026-10-20-1URL
Reported by 2 independent sources · first reported by CERT-FR · last reported
Last reported 3 days ago
What the reports say
2 reports, newest first · the exact sentence from each-
Critical PHP Vulnerability (CVE-2026-109618, CVE-2026-109619) [infocon yellow], (Wed, Oct 21st)“[php] hxxps://www.php[.]net/archive/2026.php#2026-10-20-1”
-
Multiples vulnérabilités dans PHP (21 octobre 2026)“hxxps://www.php[.]net/archive/2026.php#2026-10-20-1”
Indicators reported together
named in the same reports- cert.cyber.gouv[.]frin 1 report
- hxxps://cert.cyber.gouv[.]fr/fiche/CERTFR-2025-RFX-002/in 1 report
- hxxps://jackalsyn[.]com/posts/php-up-2026.htmlin 1 report
- jackalsyn[.]comin 1 report
Copy these 4 indicators · defanged
Also named with it: CVE-2026-109618, CVE-2026-109619
Thanks — we review every report.