Php fixes critical vulns, warns of ai-fueled exploit storm
php foundation patches two critical vulnerabilities affecting millions of websites, security experts warn of rapid exploitation using ai tools.
the php foundation detailed two critical vulnerabilities, cve-2026-109618 and cve-2026-109619, which impact all php installations serving web requests going back to php version 5. only php 8.2 and newer are still supported and will receive patches. security experts warn of potential dire consequences of overlooking unpatched systems, with lukasz olejnik saying 'this is not a drill'. the vulnerabilities could allow attackers to gain dangerous remote control of victim systems, with ai tools potentially speeding up exploitation.