PHP web runtimes (CVE-2026-109618 and CVE-2026-109619)

Imported from official source

Security notice

Cybersecurity Classified by Officially

Bulletin ID: 2026-143-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/21/2026 14:30 PM PDT Summary: Two critical vulnerabilities in PHP (CVE-2026-109618 and CVE-2026-109619) allow an unauthenticated remote actor to execute code, access process-accessible data, or cause denial of service on affected PHP workers. …

This is an extract. The publication continues at the source.

Read the original at the source: https://aws.amazon.com/security/security-bulletins/rss/2026-143-aws/

Officially imported this from Amazon Web Services’s own source and shows an extract. If you work there, claiming the profile and verifying the domain lets you choose to show the full text here.

Provenance

Organization
Amazon Web Services — imported from official source
Official source
https://aws.amazon.com/security/security-bulletins/feed/ RSS
Imported
October 22, 2026 17:00
Versions
1 recorded
Identity
41ccadb2178b1fdd1d47b3830f155bd164ea2869

Officially records where a publication came from, not whether it is true. Imported records are reproduced from an organization's own official source.