PHP security release fixes CVE-2026-109618 and CVE-2026-109619: PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35
PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical RCE flaws (CVSS 9.2). What agencies managing client sites need to do, and what to check now.













