A security update has been released to address vulnerabilities in PHP.
This update applies to versions of PHP prior to 8.2.35, 8.3.36, 8.4.27, And 8.5.12.
The vulnerabilities addressed are CVE-2026-109618, an improper exception handling vulnerability in PHP, and CVE-2026-109619, a use-after-free vulnerability in PHP.
The reference site indicates that both vulnerabilities are related to remote code execution (RCE, which allows a threat actor to execute arbitrary code remotely).
Vulnerability Patches are available through the latest updates, and users of these products should update to the latest version with the Vulnerability Patches.
