This article was collected and archived by Digital Sovereignty Watch from an institutional or public source relevant to digital sovereignty, technology policy, cybersecurity, cloud services, artificial intelligence or European regulation.
Cybersecurity
Critical Vulnerabilities in PHP Software
In October at 14:00 UTC (or 17:00 Riga time), the PHP security team plans to announce critical vulnerabilities (remote code execution) in PHP software—CVE-2026-109618 and CVE-2026-109619 (CVSS score: 9.2). These vulnerabilities affect all PHP versions from PHP 5 onward. Therefore, users should install software updates immediately as soon as they become available! https://www.php.net/archive/2026.php#2026-10-20-1 https://cert.europa.eu/publications/security-advisories/2026-018