Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619

CVE-2026-109618 and CVE-2026-109619 are two critical vulnerabilities affecting PHP, a widely used scripting language powering web servers and content management systems globally. The vulnerabilities were reported by Palo Alto Networks Unit 42 as a threat brief. Due to PHP's widespread deployment, these flaws carry significant risk for web infrastructure worldwide. The article highlights the critical severity rating of both CVEs. No additional technical details such as exploit mechanisms or patch information are provided in the available content. Organizations running PHP-based web servers or CMS platforms are likely at risk. Immediate attention and patching are implied as necessary responses.