Responding to core PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619
Two critical vulnerabilities (CVE-2026-109618 and CVE-2026-109619) were disclosed in the core PHP language runtime, exposing apps to remote code execution.
Takeaway: Audit your fleet for PHP runtimes and patch against CVE-2026-109618 and CVE-2026-109619 immediately.
Also covered by: Cloudflare Blog
Read the original at Google Cloud Blog→
⚡ Rehearse real outage walk-throughs in the SRE Interview Scenarios→
This is a short summary of the publisher's article, written for platform and SRE engineers. The original remains the primary source.