
Vulnerabilities
PHP patches released for critical CVE-2026-109618 and CVE-2026-109619
Maintainers issued urgent fixes for two severe flaws after governments and major firms took sites offline amid emerging exploitation attempts.
Everything NetSec Tribune has reported about PHP: 2 stories, newest first. Part of our Vulnerabilities coverage.

Maintainers issued urgent fixes for two severe flaws after governments and major firms took sites offline amid emerging exploitation attempts.

A stack exhaustion flaw in Symfony YAML allows unauthenticated attackers to crash processes via deeply nested inline collections in affected versions.