CVE-2026-109618
EXPLOITED
HIGH 8.8
Active attacks target PHP Group PHP flaw (CVE-2026-109618)
PHP Group · PHP
EPSS 100.00%
Update PHP Group PHP to the vendor's latest patched build for CVE-2026-109618 and enforce network isolation.
Read the fix →