NSA warns of critical PHP flaws; patches released after AI discovery

TechCrunch • 21 Հոկ 17:59

The U.S. National Security Agency warned of two severe PHP flaws dating back to 2004, for which patches have been released, and highlighted the role of AI tools in uncovering them.

WIRED • 21 Հոկ 14:26

The PHP Foundation issued emergency updates for two critical flaws, CVE-2026-109618 and CVE-2026-109619, urging immediate patching to prevent widespread exploitation.

Help Net Security • 21 Հոկ 13:51

The PHP development team has released emergency updates for PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 to address two critical remote code execution vulnerabilities, urging users to upgrade immediately.

The Hacker News • 21 Հոկ 10:36

PHP will issue fixes for two high-severity flaws on October 21, and security researchers say disabling the session upload progress feature is not a sufficient mitigation.

Infosecurity Magazine • 21 Հոկ 10:20

Two high-severity PHP flaws were disclosed a day before the planned release, prompting the PHP project and European cyber authorities to urge immediate remediation.

Ars Technica • 21 Հոկ 02:12

The PHP development team announced emergency updates for two high-severity flaws, urging administrators to prepare for deployment within the next 12 hours.

BleepingComputer • 20 Հոկ 20:56

The PHP development team will release emergency security updates on October 21 to fix two high-severity remote code execution vulnerabilities after details were leaked ahead of the planned disclosure.