Blockchain security firm SlowMist has warned crypto exchanges, DeFi platforms and wallet providers to patch two critical PHP vulnerabilities that attackers are already exploiting. The flaws, CVE-2026-109618 and CVE-2026-109619, both carry a 9.2 CVSS v4.0 score and can let unauthenticated attackers run code on vulnerable servers. PHP released fixes on October 21 in versions 8.5.12, …
Source link







