PHP 8.5.12 Security Update – Critical RCE Vulnerabilities Fixed
The PHP 8.5.12 security update addresses two critical remote‑code‑execution (RCE) vulnerabilities affecting PHP 8.5.x installations. These issues — CVE‑2026‑109618 and CVE‑2026‑109619 — allow unauthenticated attackers to execute arbitrary code under specific conditions. This makes the update essential for anyone running PHP‑based systems, including WordPress sites like this one. The PHP development team released PHP 8.5.12 […]
