Leaked news from the future.
Tap to receive
CISA will add CVE-2026-109618 or CVE-2026-109619 to its Known Exploited Vulnerabilities Catalog by October 31, 2026. The move will arrive after CISA's October 21 alert that urged immediate patching and after PHP shipped fixes on October 21 in versions 8.5.12, 8.4.27, 8.3.36 and 8.2.35. Cloudflare's…