PHP Foundation news
PHP Foundation appears in 2 stories we have published in October 2026, mostly in our Technology and Policy coverage. It is most often reported alongside The PHP Foundation.
Latest development
PHP Foundation discloses two critical vulnerabilities affecting all versions since 2004
The PHP Foundation has disclosed two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, affecting all PHP installations serving web requests from version 5 onwards. Rated 9.2 on the CVSS scale, these flaws enable unauthenticated code execution and memory leaks, with no complete mitigations available. Government websites in multiple countries went offline as a precaution, and early attacks were reported before patches were released.
22 October 2026
PHP Foundation discloses two critical vulnerabilities affecting all versions since 2004
The PHP Foundation disclosed two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, rated 9.2 on the CVSS scale.
Global cybersecurity agencies urge immediate PHP updates to prevent malware attacks
The PHP Foundation releases urgent updates for two critical vulnerabilities affecting versions dating back to 2004.