22/10/2026
🚨 PHP DEVS & SYSADMINS: Stop what you're doing and check your servers! 🚨
Google Cloud just sounded the alarm on TWO massive PHP vulnerabilities rated CVSS 9.2 (CVE-2026-109618 & CVE-2026-109619).
If you're running anything between PHP 5.4 and PHP 8.5.11, your applications could be exposed to remote code ex*****on and memory leaks.
🔒 Patched releases you need to update to:
PHP 8.5.12
PHP 8.4.27
PHP 8.3.36
PHP 8.2.35
⚠️ Running PHP 8.1 or older? Upstream PHP will not patch these EOL versions, making an immediate upgrade to a supported version crucial.
🤖 Fun Fact: Google noted that AI (Gemini 4 Argon) played a big role in identifying, exploiting, and validating the fixes for these bugs—cybersecurity is evolving fast!
Drop a comment once your containers are rebuilt and deployed. Stay safe out there! 💻✨
🔗 Full Details: https://cloud.google.com/blog/products/identity-security/responding-to-core-php-vulnerabilities-cve-2026-109618-cve-2026-109619