#php

Cyber security

PHP 8.5.12 fixes two critical pre-auth RCEs: update now

Two PHP flaws rated 9.2, CVE-2026-109618 and CVE-2026-109619, allow unauthenticated RCE before your code runs. Fixed in PHP 8.5.12 and 8.4.27.

Data Today Security Desk · Oct 21, 2026