🇸🇦 Arabic, 24 October 2026, PHP vulnerabilities
National Cybersecurity Center Warns of Two Critical Vulnerabilities in PHP
Two critical vulnerabilities in PHP, CVE-2026-109618 and CVE-2026-109619, allow remote code execution and unauthorized access to sensitive data.
The National Cybersecurity Center has warned of two critical vulnerabilities in PHP, CVE-2026-109618 and CVE-2026-109619, which can allow remote code execution and unauthorized access to sensitive data. The vulnerabilities are related to a flaw in handling memory exhaustion and a bug in handling internal cases after memory allocation. The PHP security team has released updates to address the vulnerabilities, recommending immediate updates to PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35.