10/23/2026
Is your website running vulnerable PHP? On Oct 21, PHP patched two critical flaws (CVE-2026-109618 and CVE-2026-109619, CVSS 9.2) that can let an attacker run code on a web server without logging in.
Takeaway: update to PHP 8.5.12, 8.4.27, 8.3.36 or 8.2.35, then restart PHP.
Want your site ready for AI shoppers? Visit https://robauto.ai/p
Have you checked which PHP version your site runs yet?