Critical PHP Vulnerabilities Spark Global Security Alert; SlowMist Warns Crypto Exchanges, DeFi Platforms and Wallet Providers SlowMist said its MistEye threat intelligence system conducted a global scan of PHP-related assets across the crypto industry following the disclosure…
two critical remote code execution vulnerabilities, CVE-2026-109618 and CVE-2026-109619, both rated 9.2 under CVSS v4.0. The flaws could allow unauthenticated attackers to execute code on affected servers under certain conditions
PHP released security patches on October 21, covering versions 8.5.12, 8.4.27, 8.3.36, and 8.2.35. SlowMist urged crypto exchanges, DeFi platforms, and wallet providers to assess their exposure and apply the updates promptly. — link