@cz_binance: Call me paranoid, but be extra careful visiting ANY web site in the next few days, as some web admins are not always up…
Summary
CZ warns users to be cautious browsing the web after two critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619) affecting WordPress and Magento servers were exploited in the wild following an early leak, prompting patches and WAF protections.
View Cached Full Text
Cached at: 10/22/26, 07:42 PM
Call me paranoid, but be extra careful visiting ANY web site in the next few days, as some web admins are not always up-to-date with security patches.
Two vulnerabilities (CVE-2026-109618 and CVE-2026-109619) reported for PHP, the web programming language, affecting servers running popular apps like WordPress and Magento, with patches released October 21, 2026 after details leaked early.
Exploitation was confirmed in the wild soon after disclosure, prompting quick WAF protections and patching by IT teams, as unauthenticated attacks could turn visited sites into vectors for credential theft or device exploits.
Stay SAFU!
Similar Articles
A critical PHP vulnerability may take websites down today
Two critical PHP Remote Code Execution vulnerabilities (9.2/10 severity, affecting PHP 5 onward) prompted emergency patches, with cybersecurity agencies advising unpatched sites to go offline. Over 1.3 million hosts and all WordPress sites are potentially affected, with experts anticipating mass attacks within minutes of the release.
Widespread PHP Flaw May Cause Many Site Outages Today
Two critical PHP zero-day vulnerabilities (CVE-2026-109618 and CVE-2026-109619) affecting PHP 5.4 and later are being exploited in the wild, prompting an emergency PHP release and outages across countless sites, with OpenAI and Wiz involved in the research and disclosure.
Websites taken down worldwide as critical PHP cyber-security update issued
Two critical PHP vulnerabilities, described as the most severe ever discovered by AI, prompted global governments and agencies to take websites offline while awaiting fixes. The flaws, found by researchers at Calif and Wiz using OpenAI models, had gone undetected for over a decade and reportedly affect roughly 70% of the internet.
PHP: The three little letters wreaking havoc across the web
Two severe vulnerabilities disclosed in PHP affect nearly 20 years of versions, knocking major sites like Wikipedia, WordPress-backed platforms, Internet Archive, and Cloudflare-protected services offline and forcing some old Japanese mobile games to permanently shut down.
@BalaiBB: a critical vulnerability was just discovered in PHP. the language that runs 80% of the internet severity score: 9.2 out…
A critical PHP vulnerability with a 9.2 severity score threatens to allow full server compromise, with fears that attackers will use AI to reverse-engineer the patch within 15 minutes of its release, alongside a publicly leaked exploit.