Two days between warning and patch: how the PHP project handled CVE-2026-109618 The PHP project pre-announced its October 2026 security release on 20 October and published fixes on 21 October. For two vulnerabilities rated 9. 2 under CVSS v4.

Source: [Dev.to](https://dev.to/onaeiuspkz/two-days-between-warning-and-patch-how-the-php-project-handled-cve-2026-109618-3j28)

Sponsored