Binance founder Changpeng “CZ” Zhao told his followers on Wednesday, October 21, to be “extra careful” visiting any website for the next few days. Why? PHP rushed out fixes for two PHP vulnerabilities that let attackers take over web servers without logging in. Plenty of sites won’t patch this week. Some never will.
The flaws, CVE-2026-109618 and CVE-2026-109619, have ...