Critical PHP vulnerabilities: What you need to know and do
PHP Security status update for Layershift customers
Published: 22 October 2026 - Last updated: 23 October 2026, 09.25
What happened?
On 21 October, the PHP development team released emergency fixes for two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, both rated 9.2 out of 10.
22nd Oct 2026