SlowMist flags two critical PHP vulnerabilities with CVSS 9.2
- —CVE-2026-109618 and CVE-2026-109619 carry a CVSS score of 9.2
- —The flaws pose a remote code execution risk on PHP servers
- —Official patches have not yet been released
- —Organizations are urged to audit PHP versions and internet-facing services
Why it matters: PHP underpins many crypto platform backends, leaving unpatched servers exposed to remote compromise.
Source: Coinfomania