PHP flaws trigger global cyber alert
Two critical flaws in PHP, tracked as CVE-2026-109618 and CVE-2026-109619, expose millions of web services to remote takeover. Rated 9.2 on the CVSS scale, these vulnerabilities affect platforms like WordPress and Joomla. Companies are urged to patch their systems promptly, as many installations remain vulnerable or unsupported, posing significant security risks.