[aklug] upcoming PHP vulns CVE-2026-109618, CVE-2026-109619

[Royce Williams]

POCs have been leaked prior to official announcement. May be prudent to
disable PHP until patches can be applied. Exploit rumored trivial, likely
large filename in specific kind of upload. Only PHP 8.x will be patched (so
far). Announcement scheduled for 6:00 AM Alaska time.

https://isc.sans.edu/diary/Critical%20PHP%20Vulnerability%20%28CVE-2026-109618%2C%20CVE-2026-109619%29%20%5Binfocon%20yellow%5D/33440

-- 
Royce
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.aklug.org/pipermail/aklug/attachments/20261021/fd08286e/attachment.htm>