
Web Development
Two Critical PHP Flaws Went Public This Week. Here's How We Handled Them, and What You Should Check
Two critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619) let attackers take over a web server without logging in, and CSA reports widespread exploitation attempts. Here is how we patched every server we manage overnight, and how to check whether your site is exposed.

