Peaked at #3 Now #3
PHP hit by CVSS 10.0 RCE vulnerabilities
A warning about two PHP RCE flaws, CVE-2026-109618/109619, with CVSS 10.0, potentially affecting default installations.
Key points
- @h4x0r_dz says PHP RCEs CVE-2026-109618 and CVE-2026-109619 have a CVSS score of 10.0.
- @h4x0r_dz asks whether the flaws affect the default installation of PHP.
- A reply says the announcement listed a CVSS of 9.2, not 10.
- A reply notes it is the first time seeing CVE serials with 6 digits.
Key points and the reaction summary are written by AI from the posts on this page. Check the original post. How we use AI
Original post
Top replies on X
Sign in to see 5 top replies from X
From @lcfr_hax, @mli__li, @109problems and others. Spam removed, with English and Chinese translations.

Discussion 0
Sign up Sign in to join the discussion
No comments yet. Start the conversation.