Stories tagged by our AI curator.
Two critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619, both rated 9.2) could allow attackers to execute arbitrary code on servers running PHP, which powers approximately 70% of websites.
GitLab patched a critical integer overflow vulnerability (CVE-2026-110264) affecting versions back to 2014 that could allow unauthenticated remote code execution on self-managed servers. Updates are available across multiple version branches.
The PHP security team released emergency patches for two critical remote code execution vulnerabilities tracked as PHP2Shell.
