Critical vulnerabilities in PHP: the CNPD calls for increased vigilance and corrective action

The National Commission for Data Protection (CNPD) draws the attention of data controllers and data processors to two critical vulnerabilities affecting the PHP runtime environment, identified under the references CVE-2026-109618 and CVE-2026-109619. These vulnerabilities could allow malicious actors to remotely...