HomeInsights

Critical PHP Vulnerabilities: What You Need to Know (Webinar Replay)

Abstract curved lines in shades of blue and purple flowing against a transparent background.

Watch this briefing to understand what has been disclosed, who may be affected, and the immediate steps organizations should consider taking.

A rapid briefing on the newly disclosed PHP vulnerabilities

Two critical vulnerabilities have just been disclosed in PHP, potentially exposing web applications and infrastructure around the world. CVE-2026-109618 and CVE-2026-109619 both carry a CVSS score of 9.2 and could allow an unauthenticated attacker to remotely execute code on vulnerable servers. Security authorities are urging organizations to identify affected systems and apply the newly released security updates as a priority.

In this rapid briefing, we cover:

  • What happened and why these vulnerabilities matter
  • Which PHP versions and environments are affected
  • What attackers could potentially do if exploitation is successful
  • How to identify and prioritize potentially exposed systems
  • The immediate remediation steps organizations should consider

‍

A rapid briefing on the newly disclosed PHP vulnerabilities

Two critical vulnerabilities have just been disclosed in PHP, potentially exposing web applications and infrastructure around the world. CVE-2026-109618 and CVE-2026-109619 both carry a CVSS score of 9.2 and could allow an unauthenticated attacker to remotely execute code on vulnerable servers. Security authorities are urging organizations to identify affected systems and apply the newly released security updates as a priority.

In this rapid briefing, we cover:

  • What happened and why these vulnerabilities matter
  • Which PHP versions and environments are affected
  • What attackers could potentially do if exploitation is successful
  • How to identify and prioritize potentially exposed systems
  • The immediate remediation steps organizations should consider

‍

Global

Francisco Donoso
Chief Product and Technology Officer


Learn more

Purple webinar banner titled 'Top Threats for 2025' with blurred city street and pedestrians in sunlight on the right.

For more on the critical cybersecurity controls you should be using and how they can protect your organization, replay the webinar on demand at:

Top Threats for 2025 (Webinar Replay)

watch webinar

More Insights

View All >
Abstract purple background with flowing curved blue and white lines.

Quarterly Threat Report: Second Quarter, 2026

While more than 20,700 new vulnerabilities were disclosed, confirmed exploitation in the wild grew by just 10%. The population of vulnerabilities disclosed grew by a third, but the methods attackers are using to gain initial access barely moved.

Abstract purple background with flowing curved blue and white lines.

Third-Party Risk Monitoring Factsheet

Beazley Security’s Third‑Party Risk Monitoring (TPRM) helps you stay ahead of risk by delivering continuous visibility into the external security posture of the vendors you depend on most.

Abstract purple background with flowing curved blue and white lines.

Securing Remote Work: Key Strategies to Protect Your Corporate Data

Remote work and BYOD are now standard, but they bring new security challenges. During our recent webinar, Sam Foot, our seasoned security consultant, shared essential strategies for protecting corporate data in this evolving landscape.

Abstract purple background with flowing curved blue and white lines.

Critical PHP Vulnerabilities: What You Need to Know (Webinar Replay)

Watch this briefing to understand what has been disclosed, who may be affected, and the immediate steps organizations should consider taking.

Abstract purple background with flowing curved blue and white lines.

AI Readiness Checklist

Assess your organisation's AI risk management and readiness.

Abstract purple background with flowing curved blue and white lines.

AI Readiness: How CISOs Can Select AI Technologies Without Increasing Security and Third-Party Risk

Choosing the wrong AI platform can create security blind spots, compliance gaps, and third-party risks that grow harder to fix as adoption expands. In Part 3 of our Five Pillars of AI Readiness series, we outline how CISOs can evaluate vendors, align new AI technologies with existing security controls, and use proof-of-concept testing to select solutions that stay secure and scalable.

Beazley Security can help protect you

We offer services and solutions to help you prepare and stay resilient in the changing threat landscape. Prepare to learn more about how we can help you

Visit Solutions