↑

Blog

Home / Blog

Tag Incident Response

Critical PHP RCE Vulnerability 2026: How We Patched 34 Servers in 48 Hours

34 PHP servers patched in 48 hours after critical PHP RCE vulnerability, CVSS 9.2

A critical PHP RCE vulnerability (CVE-2026-109618, CVE-2026-109619) hit PHP servers worldwide. How we patched 34 servers in 48 hours and how to check yours.

October 23, 2026