Unofficial backports posted for EOL PHP RCE flaws
Source patches cover unauthenticated RCE CVE-2026-109618 and CVE-2026-109619, rated CVSS 4.0 9.2, where vendors will not fix.
Stories per day · 30 days
2 stories, newest first · one card per story
Stories tagged #amazon-linux
AWS rates a PHP RCE Important; Amazon Linux 2023 patch may take 20 days
The available post is only that claim plus a Hacker News score of 48 points and 10 comments.