Introduction PHP administrators need to pay attention to two critical security vulnerabilities disclosed in October 2026. These vulnerabilities could allow remote attackers to execute arbitrary code on vulnerable PHP installations under suitable conditions. The PHP development team released security updates on October 21, 2026, addressing the following vulnerabilities: CVE-2026-109618: Remote …