Search

Items tagged with: rce


The media in this post is not displayed to visitors. To view it, please go to the original post.

If you run #Friendica or maintain a #Linux web #server running #PHP, whether bare metal, #Docker, or anything in between: **update PHP immediately.**

Two critical #RCE (Remote Code Execution) vulnerabilities affect PHP:
• CVE-2026-109618
• CVE-2026-109619

Currently fixed versions:
• PHP 8.5.12
• PHP 8.4.27
• PHP 8.3.36
• PHP 8.2.35


Dark graphic showing server racks in the background and a blue PHP elephant. Large text reads “PHP Security Update”, followed by “CVE-2026-109618” and “CVE-2026-109619”.


This affects PHP servers, PHP-FPM, Docker images and containers containing PHP, and applications such as Friendica.

Update your PHP packages. If you're using containers, pull/rebuild your images and recreate the containers.

Don't just update the application. Make sure the underlying PHP runtime is patched too.

!Friendica Admins


blog.gslin.org/archives/2026/1…

PHP 的兩包 RCE

#ace #advisory #arbitrary #code #execution #gpt #Gpt56 #language #large #llm #model #openai #php #rce #remote #security #sol #vulnerability

⇧