Get the most out of your Centmin Mod LEMP stack
Become a Member

CVE-2026-109618 and CVE-2026-109619

Discussion in 'Nginx, PHP-FPM & MariaDB MySQL' started by allastronauts, Oct 21, 2026 at 3:15 PM.

  1. allastronauts

    allastronauts New Member

    6
    0
    1
    Nov 28, 2020
    Ratings:
    +1
    Local Time:
    2:08 AM
    Anything in-bound for Centmin when the patches drop or should we just turn our servers off because clearly the internet was a bad idea in the first place... Pouring one out for you seeing as you just dropped some patches earlier today.


    For those living in a hole or have not checked the interwebs in the last few hours the mother of all PHP exploits is going to hit everyone starting in about 8 hours:

    https://threatlandscape.io/blog/php-core-rce-cve-2026-109618-109619-leak-ahead-of-embargo
     
  2. Matt

    Matt Well-Known Member

    935
    415
    63
    May 25, 2014
    Rotherham, UK
    Ratings:
    +672
    Local Time:
    8:08 AM
    1.5.15
    MariaDB 10.2
    Can't even download the packages currently

    upload_2026-10-21_7-48-36.png
     
  3. duderuud

    duderuud Active Member

    326
    97
    28
    Dec 5, 2020
    The Netherlands
    Ratings:
    +219
    Local Time:
    9:08 AM
    1.29 x
    11.4
  4. Matt

    Matt Well-Known Member

    935
    415
    63
    May 25, 2014
    Rotherham, UK
    Ratings:
    +672
    Local Time:
    8:08 AM
    1.5.15
    MariaDB 10.2