Story · 1 source · 3 articlesfirst Oct 20, 22:39 UTCupdated Oct 22, 00:51 UTC (17h ago)

PSA: Upcoming Critical PHP Security Release

criticalVulnerabilityexploited in the wildimportance 84CVE-2026-109618 CVE-2026-109619

Merged summary · from the lead article

Have you been hacked?Get Help Create Account Sign In [](https://www.wordfence.com/cart/) [](https://www.wordfence.com/) • Products • Our Products • Wordfence Free • Wordfence Premium • Wordfence Care • Wordfence Response • Wordfence CLI • Wordfence Intelligence • Wordfence Central • Compare Plans • Intelligence • Overview • Dashboard • About • Vulnerability Database • All Vulnerabilities •…

Coverage timelineoldest first · each row is one article

Oct 20, 22:39 UTC · 1d ago
Wordfence· 84
PSA: Upcoming Critical PHP Security Release
Oct 21, 16:49 UTC · 1d ago
Wordfence· 72
PSA: PHP Security Updates Available for Two Critical Vulnerabilities, Update Now
00:51 UTC · 17h ago
Wordfence· 72
Why It’s Urgent to Update PHP on Your WordPress Site: Two Critical PHP Vulnerabilities and What Our Testing Found

Vulnerabilities in this storyAll →

CVE-2026-1096199.26%
PHP has various global state that temporarily points into request memory
published 1d ago· php php PoC ×7+1 related

CVE	Vulnerability	CVSS	EPSS	Flags	Affected	Exposure	Published
CVE-2026-109619