/ Register

Welcome to Centmin Mod Community
Register Now

PHP CVE-2026-109618 & CVE-2026-109619 PHP Remote Code Execution vulnerable

Discussion in 'Nginx and PHP-FPM news & discussions' started by Earl, Oct 21, 2026 at 6:56 PM.

Tags:
Previous Thread Next Thread
Loading...
  1. Oct 21, 2026 at 6:56 PM #1
    Earl

    Earl New Member

    18
    6
    3
    Sep 17, 2015
    Ratings:
    +10
    Local Time:
    12:40 PM
    PHP Remote Code Execution (CVE-2026-109618 & CVE-2026-109619) Information about two new remote code execution (RCE) vulnerabilities in PHP, tracked as CVE-2026-109618 and CVE-2026-109619 (CVSS v3.1 10 / 10), has leaked ahead of their coordinated disclosure, and security firm Watchtowr Labs confirmed that the flaws are real. Both vulnerabilities are due to be disclosed on Thursday, October 22, alongside patches. Until those advisories land, no fix is available, which leaves the flaws as zero-days in PHP installations everywhere.There is currently a scheduled release of an advisement and possible patch on Wednesday, October 21 2026 at 14:00 UTC.

    source: Eric Taylor (@bcs_erictaylor) on X
    video


    How do we patch it?
     
  2. Oct 21, 2026 at 10:21 PM #2
    Dannymh

    Dannymh New Member

    27
    6
    3
    Oct 23, 2014
    Ratings:
    +7
    Local Time:
    9:10 AM
    1.7.x
    5.5
    We wait for the releases then we do thes standard PHP upgrade through the menu.

    I am being cautious and have taken my site down for maintenance and turned off and masked php-fpm
     
  3. Oct 21, 2026 at 10:57 PM #3
    pamamolf

    pamamolf Well-Known Member

    4,128
    429
    83
    May 31, 2014
    Ratings:
    +841
    Local Time:
    10:10 AM
    Nginx-1.29.x
    MariaDB 10.6.x
    We should get asap backported patches too.
     
  4. Oct 22, 2026 at 5:12 AM #4
    eva2000

    eva2000 Administrator Staff Member

    60,036
    12,571
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,224
    Local Time:
    5:10 PM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    So much work to do https://community.centminmod.com/th...-updates-and-eol-php-7-4-8-1-backports.33134/ :)

     
  5. Oct 22, 2026 at 5:30 AM #5
    Matt

    Matt Well-Known Member

    937
    415
    63
    May 25, 2014
    Rotherham, UK
    Ratings:
    +675
    Local Time:
    8:10 AM
    1.5.15
    MariaDB 10.2
Previous Thread Next Thread
Loading...

.