Original Summary

A reliable source has indicated an announcement is scheduled for 22 October 2026 at 18:00 CEST regarding 2x PHP RCEs with a CVSS score of 10.0.<p>I have no additional evidence to back this up beyond &quot;source: trust me, bro&quot;, but if you&#x27;re running PHP in production it would be prudent to be ready to update as a matter of priority. These CVEs reportedly relate to remote code execution in all affected PHP versions from PHP 5 onwards.<p>These are the two reserved CVEs for the reported upcoming announcement:<p>CVE-2026-109618<p>CVE-2026-109619

  • 情报分类：综合情报
  • 分类依据：内容未命中明确的垂直分类规则，归入综合情报
  • 信息来源：Hacker News 新项目
  • 发布时间：2026/10/20 23:20:35