Critical PHP vulnerabilities CVE-2026-109618/619 prompt urgent patching; no attacks in Austria yet

Two critical PHP vulnerabilities (CVE-2026-109618, CVE-2026-109619) disclosed Wednesday are causing concern; no successful attacks reported in Austria so far. Operators are urged to go beyond applying updates, implying potential active exploitation or complex mitigation. The full scope and exploitation status remain uncertain, but the vulnerabilities could affect a vast number of web servers globally.

AI disclosure: Model-written summary of the source, not a verified fact. Check the sources. How Mosaic works